General

  • Target

    5bbb6fe1884841e2f311afca0b17c3e4_JaffaCakes118

  • Size

    1.1MB

  • MD5

    5bbb6fe1884841e2f311afca0b17c3e4

  • SHA1

    3f8af8e891057da9ff85bede927b97052dd21cc3

  • SHA256

    0cd51858ffe5c9a5d8762b09a130b7fa75922abf22f4ec905c4c95f1c29481ec

  • SHA512

    2e73a471df53b4b684f39b3a4a03e6cf0748a90cda763be65842940b5c1cbd7a3d9aa6245ac27a64799cd487b56d3ec9857078d33cbbe495e2cb8e7b1eba738f

  • SSDEEP

    24576:CzzZtS2+8Fny2RQyXXDpnAdLdZiqXJ6mpEMfKIwlsA0/:AZtS25nygpAPZiqXJhtwP+

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5bbb6fe1884841e2f311afca0b17c3e4_JaffaCakes118
    .rar
  • WingFaster/COMDLG32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WingFaster/MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    2b2ee4e06ab7ae589a670cad99121b44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WingFaster/MSVBVM60.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • WingFaster/TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    e0cb36c66e5c120ef20ebc4f30366345


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WingFaster/WingFaster2.8.exe
    .exe windows:4 windows x86 arch:x86

    e0ad56cef2053ebf73a853f9eb2e7462


    Headers

    Imports

    Sections

  • WingFaster/飞速绿色下载.url
    .url