Overview

overview

7

Static

static

7

akl_4.04.exe

windows7-x64

7

akl_4.04.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDIR/exdll.dll

windows7-x64

3

$PLUGINSDIR/exdll.dll

windows10-2004-x64

3

Active Key Logger.exe

windows7-x64

3

Active Key Logger.exe

windows10-2004-x64

3

Documentation.chm

windows7-x64

1

Documentation.chm

windows10-2004-x64

1

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Zipdll.dll

windows7-x64

3

Zipdll.dll

windows10-2004-x64

3

first.exe

windows7-x64

3

first.exe

windows10-2004-x64

7

legion.dll

windows7-x64

3

legion.dll

windows10-2004-x64

3

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76945555c39de59c5088b82064cdf0cb_JaffaCakes118

  • Size

    1.7MB

  • MD5

    76945555c39de59c5088b82064cdf0cb

  • SHA1

    d85bf1dfa625847bd6b38cc0aeed417b7c44a36b

  • SHA256

    586e4e0cb03ec5af166c2fee52db5ce2f5f87264a79dc98cc4c46b6cf926fd10

  • SHA512

    44a15c89d7fe374203643590d8a262ce5b93fff9c2864708d66d8aec857e54eb5374297f4d0e44b491c5dc4e880396322a0d27bf9a8c8a398dcd0d26fd5f25ee

  • SSDEEP

    49152:eUJNk6xDfqMcv14hqHk0oKKvRdlBWY19o26fn5dgmj/A:NJNk6xqJQqGHRH9sRRdgQ/A

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 76945555c39de59c5088b82064cdf0cb_JaffaCakes118
    .rar
  • akl_4.04.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/exdll.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/ioC.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Active Key Logger.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Active Key Logger
  • Documentation.chm
    .chm
  • LICENSE.TXT
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Zipdll.dll
    .dll windows:4 windows x86 arch:x86

    51ec68487efca143bb28a6047c14566e


    Headers

    Imports

    Exports

    Sections

  • first.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • legion.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 新云软件.url
    .url