General

  • Target

    73296b495afec4833e4dd9d5b597bad6_JaffaCakes118

  • Size

    2.3MB

  • MD5

    73296b495afec4833e4dd9d5b597bad6

  • SHA1

    c841dd1bff3c82e8b870260dee4484e812fc2be0

  • SHA256

    5f66970733997a2da47070d9e490b9c766540fce04b4ab68e861bc74c84d6627

  • SHA512

    b5a193438d84b42a2679ba565481ba50e72d18cce1ebbb48b3fcbc08c29830c0be02efb91821ed9031f2879530cb57fcc20237df60197a0d6404832de633708e

  • SSDEEP

    49152:u+ayTf8a4TkBUBiELuxFlFUAH+C5qIalWfVRRnO3xs3Az4tEYG2P+BLy6:u+ayf8LTWUMoUrBFqDWXRnO3q3Az8/Hy

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • 73296b495afec4833e4dd9d5b597bad6_JaffaCakes118
    .rar
  • it46/Important/DiDaGrid.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    f2c3a8ffe62eddb65323621d30a75f77


    Headers

    Imports

    Exports

    Sections

  • it46/Important/REG.edb
  • it46/Important/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • it46/UpDate.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • it46/WebBrowser.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • it46/精易编程助手.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections