General

  • Target

    6657fe8d4992741a142c70acdf8bc0f1_JaffaCakes118

  • Size

    4.7MB

  • MD5

    6657fe8d4992741a142c70acdf8bc0f1

  • SHA1

    1cc32d02dc261c01aa67cf5fb7ea6132668e77c0

  • SHA256

    e64332d9f18d4d3f83a80a520652b8f048fd8da10ed8d477a3ff745506ab03ad

  • SHA512

    371a08bd5480e378df2555d5ccbb68cb9e0c8394a9fa1e056fcc207cfdbdfd66401ae442d341fa1355e1cbc5d0458445c12d161ca08ab4ef14f31904c6d735c7

  • SSDEEP

    98304:ocFHkLuYtse+Z80sZKE2w5J3HGO7yuSm0//3yqvbLfTZDy9F0yG0:VwuYtlmnsZHHhqzrOJG0

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 6657fe8d4992741a142c70acdf8bc0f1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/AlternativeStartMenuApplication.ini
  • $PLUGINSDIR/Banner.dll
    .dll windows:4 windows x86 arch:x86

    7a3709b093081d5614be1eaa2fe7fe76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BtmImg.bmp
  • $PLUGINSDIR/ButtonImg.bmp
  • $PLUGINSDIR/COMPLETE.bmp
  • $PLUGINSDIR/Custom.bmp
  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Header.bmp
  • $PLUGINSDIR/InstallOptionsEx.dll
    .dll windows:5 windows x86 arch:x86

    ac4e928037af5a32b52d9b140ae0017f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LeftImg.bmp
  • $PLUGINSDIR/MA_DIRECTORY.ini
  • $PLUGINSDIR/MINIMAL.bmp
  • $PLUGINSDIR/NSISArray.dll
    .dll windows:4 windows x86 arch:x86

    91596216b99c852af6e0fb1fe8192de4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PageBG.bmp
  • $PLUGINSDIR/STANDARD.bmp
  • $PLUGINSDIR/ScrollBarImg.bmp
  • $PLUGINSDIR/SetupType.ini
  • $PLUGINSDIR/SkinnedControls.dll
    .dll windows:4 windows x86 arch:x86

    061c6722cad7481b1b1ec5ef69682b80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/confirm.ini
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    8773e19ae02f331332db1b00671fdecf


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioFile.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/nsis7z.dll
    .dll windows:5 windows x86 arch:x86

    4c04c20a976733bf789fead96eb58701


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    11fff8f2508658ef41662344b464f9e3


    Headers

    Imports

    Exports

    Sections

  • $_17_/IJL15.DLL
    .dll windows:5 windows x86 arch:x86

    858bc1143564d13bd82d93d8f6b0c3c8


    Headers

    Imports

    Exports

    Sections

  • $_17_/Lbg-patch.ini
  • $_17_/ijl15.dat
    .dll windows:4 windows x86 arch:x86

    6b540d7d784d97e028bc85e2ab457662


    Headers

    Imports

    Exports

    Sections

  • License.html
    .js .xml polyglot
  • MabiAssist.hta
    .hta .js polyglot
  • MabiAssist.ico
  • MabiAssist.ini
  • img/3MLE.png
    .png
  • img/BMP2MabiPNG.png
    .png
  • img/KukuTimer.png
    .png
  • img/KukuTimerFairy.png
    .png
  • img/MabinogiColorHelper.png
    .png
  • img/Noginogi.png
    .png
  • img/Weather/0.png
    .png
  • img/Weather/1.png
    .png
  • img/Weather/10.png
    .png
  • img/Weather/11.png
    .png
  • img/Weather/12.png
    .png
  • img/Weather/13.png
    .png
  • img/Weather/14.png
    .png
  • img/Weather/15.png
    .png
  • img/Weather/16.png
    .png
  • img/Weather/17.png
    .png
  • img/Weather/18.png
    .png
  • img/Weather/19.png
    .png
  • img/Weather/2.png
    .png
  • img/Weather/20.png
    .png
  • img/Weather/21.png
    .png
  • img/Weather/22.png
    .png
  • img/Weather/3.png
    .png
  • img/Weather/4.png
    .png
  • img/Weather/5.png
    .png
  • img/Weather/6.png
    .png
  • img/Weather/7.png
    .png
  • img/Weather/8.png
    .png
  • img/Weather/9.png
    .png
  • img/html.ico
  • img/icons/cancel.png
    .png
  • img/icons/config.png
    .png
  • img/icons/edit.png
    .png
  • img/icons/execute.png
    .png
  • img/icons/feed.png
    .png
  • img/icons/file.png
    .png
  • img/icons/home.png
    .png
  • img/icons/license.png
    .png
  • img/icons/official.png
    .png
  • img/icons/ok.png
    .png
  • img/icons/print.png
    .png
  • img/icons/weather.png
    .png
  • img/kbd.png
    .png
  • img/loading.gif
    .gif
  • img/mabinogi.png
    .png
  • img/mmSeq.png
    .png
  • js/MabiAssist.css
  • js/MabiAssist.js
    .js
  • js/ini.js
    .js
  • js/io.js
    .js
  • locale/China.ini
  • locale/Japan.ini
  • locale/Korea.ini
  • locale/Taiwan.ini
  • locale/US.ini
  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections