5ed6c3a2fd230b5232e4e74f0e5e8c67_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5ed6c3a2fd230b5232e4e74f0e5e8c67_JaffaCakes118
Size

844KB
MD5

5ed6c3a2fd230b5232e4e74f0e5e8c67
SHA1

e97e170da3a8f2175b57dcbeb7f12c146912c7f8
SHA256

8b097a7e1bc9d24ba13825c1a506ac744a4bb5229704908ece9b2451cc293614
SHA512

ef916be686ae3813bb328e61d22c308f08c4f7f68b6ccef92675b1bc1b5c2d293da5a684e6927b21181e3b2b585ecb6988ef984b06cb13647a2b658aadb0d730
SSDEEP

12288:INi33/p5Nye1kT8A1BOhqD0ePOv9Eyru4Df7yin/s4Y58niVCTemdYzSC14Yw0hd:I4nReejAmhukWyaU7iAqJwsHvR2Q

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/New True Glass Skin/Mini Dock/StartMenu/Start.exe	upx

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
static1/unpack002/out.upx	autoit_exe

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/New True Glass Skin/Full install.exe
unpack001/New True Glass Skin/Mini Dock/StartMenu/Start.exe
unpack002/out.upx

Files

5ed6c3a2fd230b5232e4e74f0e5e8c67_JaffaCakes118
.rar
New True Glass Skin/CPU Usage/Cpu.ini
New True Glass Skin/CPU Usage/back.png
.png
New True Glass Skin/Drives Usage/Drives.ini
New True Glass Skin/Drives Usage/back.png
.png
New True Glass Skin/Full install.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
New True Glass Skin/Mini Dock/Mini Dock.ini
New True Glass Skin/Mini Dock/StartMenu/Start.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 780KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 253KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 366KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 373KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
New True Glass Skin/Mini Dock/back.png
.png
New True Glass Skin/Mini Dock/fox.png
.png
New True Glass Skin/Mini Dock/play.png
.png
New True Glass Skin/Mini Dock/ps.png
.png
New True Glass Skin/Mini Dock/shutdown.png
.png
New True Glass Skin/Mini Dock/start.png
.png
New True Glass Skin/Network/Network.ini
New True Glass Skin/Network/back.png
.png
New True Glass Skin/RAM/back.png
.png
New True Glass Skin/RAM/stats.ini
New True Glass Skin/Windows Glass Media Player/WM Player.ini
New True Glass Skin/Windows Glass Media Player/back.png
.png
New True Glass Skin/Windows Glass Media Player/bacvk.png
.png
New True Glass Skin/Windows Glass Media Player/next.png
.png
New True Glass Skin/Windows Glass Media Player/pause.png
.png
New True Glass Skin/Windows Glass Media Player/play.png
.png
New True Glass Skin/Windows Glass Media Player/prev.png
.png
New True Glass Skin/Windows Glass Media Player/vdown.png
.png
New True Glass Skin/Windows Glass Media Player/vup.png
.png
New True Glass Skin/shutdown/logoffb.png
.png
New True Glass Skin/shutdown/restartb.png
.png
New True Glass Skin/shutdown/sep.png
.png
New True Glass Skin/shutdown/shutdown.ini
New True Glass Skin/shutdown/shutdownb.png
.png
New True Glass Skin/time/Time.ini
New True Glass Skin/time/sep.png
.png

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 481KB - Virtual size: 481KB

.rsrc Size: 1024B - Virtual size: 664B

.reloc Size: 512B - Virtual size: 12B

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 780KB

UPX1 Size: 253KB - Virtual size: 256KB

.rsrc Size: 366KB - Virtual size: 368KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 495KB - Virtual size: 495KB

.rdata Size: 53KB - Virtual size: 53KB

.data Size: 11KB - Virtual size: 90KB

.rsrc Size: 373KB - Virtual size: 373KB

.text
Size: 481KB - Virtual size: 481KB

.rsrc
Size: 1024B - Virtual size: 664B

.reloc
Size: 512B - Virtual size: 12B

UPX0
Size: - Virtual size: 780KB

UPX1
Size: 253KB - Virtual size: 256KB

.rsrc
Size: 366KB - Virtual size: 368KB

.text
Size: 495KB - Virtual size: 495KB

.rdata
Size: 53KB - Virtual size: 53KB

.data
Size: 11KB - Virtual size: 90KB

.rsrc
Size: 373KB - Virtual size: 373KB