Overview

overview

8

Static

static

7

61d3484e76...18.exe

windows7-x64

7

61d3484e76...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

KLKlMon.dll

windows7-x64

6

KLKlMon.dll

windows10-2004-x64

3

appface.dll

windows7-x64

7

appface.dll

windows10-2004-x64

7

unukl.exe

windows7-x64

7

unukl.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

wmpusrvc.chm

windows7-x64

1

wmpusrvc.chm

windows10-2004-x64

1

wmpusrvc.exe

windows7-x64

8

wmpusrvc.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    61d3484e7695544b2d89420907bc5a5c_JaffaCakes118

  • Size

    2.6MB

  • MD5

    61d3484e7695544b2d89420907bc5a5c

  • SHA1

    3929a51b932244beebc3f095fd055c9a516a3833

  • SHA256

    c6359ae71a0829b9eb49aa4df2b89a1074df6af56aa10fff89a6a833936647bf

  • SHA512

    e90840ca1a908af232ae57f985871f03f59a09de081648390bf6cc48eefb41789a855bf06d0233ebbe2f2cb14b5a7a3a15fb23fe5c23a44675a671327e25bd75

  • SSDEEP

    49152:lQX0OquPwbqEBguazuNoLf+INhorQFaR1/BkwhS48jHZqbKoGV9UX4o1Z:lQXLjwuE6vzuqyIr5gR4sQjcbuV9UX1

Score
7/10
aspackv2upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 61d3484e7695544b2d89420907bc5a5c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    51cc377db2a9db8d63bafd8fe8dffb97


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • KLKlMon.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • appface.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ui.urf
  • unukl.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    51cc377db2a9db8d63bafd8fe8dffb97


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • wmpusrvc.chm
    .chm
  • wmpusrvc.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections