Overview

overview

7

Static

static

7

155绿色�...��.url

windows7-x64

1

155绿色�...��.url

windows10-2004-x64

1

devcpp-4.9...up.exe

windows7-x64

7

devcpp-4.9...up.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Packman.exe

windows7-x64

7

Packman.exe

windows10-2004-x64

7

addr2line.exe

windows7-x64

1

addr2line.exe

windows10-2004-x64

3

ar.exe

windows7-x64

1

ar.exe

windows10-2004-x64

3

as.exe

windows7-x64

1

as.exe

windows10-2004-x64

3

bin/rm.exe

windows7-x64

1

bin/rm.exe

windows10-2004-x64

3

bitset.js

windows7-x64

3

bitset.js

windows10-2004-x64

3

c++.exe

windows7-x64

1

c++.exe

windows10-2004-x64

3

c++filt.exe

windows7-x64

1

c++filt.exe

windows10-2004-x64

3

cpp.exe

windows7-x64

1

cpp.exe

windows10-2004-x64

3

devcpp.exe

windows7-x64

7

devcpp.exe

windows10-2004-x64

7

dlltool.exe

windows7-x64

1

dlltool.exe

windows10-2004-x64

3

dllwrap.exe

windows7-x64

1

dllwrap.exe

windows10-2004-x64

3

g++.exe

windows7-x64

3

g++.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7762097d10e0d8a2cb4bb0bdb541d755_JaffaCakes118

  • Size

    8.9MB

  • MD5

    7762097d10e0d8a2cb4bb0bdb541d755

  • SHA1

    1ead7d3cf50b0611b574f71680c47330ddb0f97d

  • SHA256

    4954ec1edba18471f5733ed30d9a626909ae5089b0c4ee54ac3fc20231a586dd

  • SHA512

    26aa7ed608fe7c03222f1af736341b7cd36ccc4aa0b1c6db9b23d601a5a8f48e4e6546ad5e92f1d0157c45c446181bac83ee7421c5a971cb47733f47e4dc33ed

  • SSDEEP

    196608:Z/VOWr55Z27YSVrJvN8FV7DGWvAVDuI+UQpXe5BUR1bj9V8dWWEXBa:RVOWV587YaJvN8HGKAVDpnQsqH+WZ0

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 36 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • 7762097d10e0d8a2cb4bb0bdb541d755_JaffaCakes118
    .rar
  • 155绿色软件站.url
    .url
  • devcpp-4.9.9.2_setup.exe
    .exe windows:4 windows x86 arch:x86

    9632e80596371cfa7f563f680f3c4498


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • DbgHelp.h
  • Examples/FileEditor/FileEditor.dev
  • Examples/FileEditor/FileEditor.ico
  • Examples/FileEditor/FileEditor.rc
  • Examples/FileEditor/Main.c
  • Examples/FileEditor/Main.h
  • Examples/FileEditor/Menu.rc
  • Examples/Hello/Hello.cpp
  • Examples/Hello/Hello.dev
  • Examples/Jackpot/Jackpot.dev
  • Examples/Jackpot/main.cpp
  • Examples/MDIApp/MdiApp.dev
  • Examples/MDIApp/MdiApp.rc
  • Examples/MDIApp/mdi_res.rc
  • Examples/MDIApp/mdi_unit.c
  • Examples/MDIApp/mdi_unit.h
  • Examples/OpenGL/Main.cpp
  • Examples/OpenGL/OpenGL.dev
  • Examples/OpenGL/mainicon.ico
  • Examples/Simpwin/Main.cpp
  • Examples/Simpwin/Simple.dev
  • Examples/Simpwin/Simple.ico
  • Examples/Simpwin/Simple.rc
  • Examples/WinAnim/Anim.dev
  • Examples/WinAnim/Anim.ico
  • Examples/WinAnim/Anim.rc
  • Examples/WinAnim/Images.rc
  • Examples/WinAnim/Main.c
  • Examples/WinAnim/ball.bmp
  • Examples/WinAnim/ballmask.bmp
  • Examples/WinMenu/Rsrc.rc
  • Examples/WinMenu/WinMenu.dev
  • Examples/WinMenu/main.cpp
  • Examples/WinMenu/main.h
  • Examples/WinTest/Test.c
  • Examples/WinTest/WinTest.dev
  • Examples/WinTest/WinTest.ico
  • Examples/WinTest/WinTest.rc
  • Help/devcpp.CNT
  • Help/devcpp.HLP
  • Icons/Book.ico
  • Icons/Communication.ico
  • Icons/Console.ico
  • Icons/Crazy.ico
  • Icons/Danger.ico
  • Icons/Documentation.ico
  • Icons/Edit.ico
  • Icons/Editor.ico
  • Icons/File Management.ico
  • Icons/Folder.ico
  • Icons/Food.ico
  • Icons/Games.ico
  • Icons/Goofy.ico
  • Icons/Movie.ico
  • Icons/Multimedia.ico
  • Icons/Paint.ico
  • Icons/Rescue.ico
  • Icons/Smile.ico
  • Icons/Software.ico
  • Icons/Ufo.ico
  • Icons/Window.ico
  • Icons/mainicon.ico
  • Lang/English.lng
  • Lang/English.tips
  • NEWS.txt
  • Packages/DevCppHelp.entry
  • Packman.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Templates/1-WinApp.template
  • Templates/2-ConsoleApp.template
  • Templates/3-StaticLib.template
  • Templates/4-DLL.template
  • Templates/5-Empty.template
  • Templates/ConsoleApp_c.txt
  • Templates/ConsoleApp_cpp.txt
  • Templates/Dll_c.txt
  • Templates/Dll_cpp.txt
  • Templates/Dll_h.txt
  • Templates/Dll_hpp.txt
  • Templates/Hello.ico
  • Templates/Hello.template
  • Templates/Hello_c.txt
  • Templates/Hello_cpp.txt
  • Templates/OpenGL.template
  • Templates/OpenGL.txt
  • Templates/WinApp_c.txt
  • _mingw.h
  • accctrl.h
  • aclapi.h
  • aclui.h
  • addr2line.exe
    .exe windows:4 windows x86 arch:x86

    6533f9e98c592e7237cea933efefe7e4


    Headers

    Imports

    Sections

  • afxres.h
  • algo.h
  • algobase.h
  • algorithm
  • alloc.h
  • ansidecl.h
  • ar.exe
    .exe windows:4 windows x86 arch:x86

    02bb17b8975e6c3ece1eb199baf12355


    Headers

    Imports

    Sections

  • as.exe
    .exe windows:4 windows x86 arch:x86

    d4e9dbec0bd39bfbfe522e0f23777f42


    Headers

    Imports

    Sections

  • assert.h
  • backward_warning.h
  • basetsd.h
  • basetyps.h
  • bfd.h
  • bfdlink.h
  • bin/rm.exe
    .exe windows:4 windows x86 arch:x86

    8e8f692dedbda0c38c3e9d64ad2c5793


    Headers

    Imports

    Sections

  • bitset
    .js
  • bvector.h
  • c++.exe
    .exe windows:4 windows x86 arch:x86

    8c5fd423f07232cff77d38c808b78fe9


    Headers

    Imports

    Sections

  • c++filt.exe
    .exe windows:4 windows x86 arch:x86

    75a4056dbd63e256868bd8cac57da4aa


    Headers

    Imports

    Sections

  • cassert
  • cctype
  • cderr.h
  • cerrno
  • cfloat
  • cguid.h
  • ciso646
  • climits
  • clocale
  • cmath
  • comcat.h
  • commctrl.h
  • commdlg.h
  • complex
  • complex.h
  • conio.h
  • copying.txt
  • cpl.h
  • cplext.h
  • cpp.exe
    .exe windows:4 windows x86 arch:x86

    8c5fd423f07232cff77d38c808b78fe9


    Headers

    Imports

    Sections

  • csetjmp
  • csignal
  • cstdarg
  • cstddef
  • cstdio
  • cstdlib
  • cstring
  • ctime
  • ctype.h
  • custcntl.h
  • cwchar
  • cwctype
  • cxxabi.h
  • d3d9.h
  • d3d9caps.h
  • d3d9types.h
  • dbt.h
  • dde.h
  • ddeml.h
  • deque
  • devcpp.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • dhcpcsdk.h
  • dir.h
  • direct.h
  • dirent.h
  • dis-asm.h
  • dlgs.h
  • dlltool.exe
    .exe windows:4 windows x86 arch:x86

    845618950a74965542f02dcdbe78fd81


    Headers

    Imports

    Sections

  • dllwrap.exe
    .exe windows:4 windows x86 arch:x86

    adff95824c037fbd6dced28582181b7d


    Headers

    Imports

    Sections

  • docobj.h
  • dos.h
  • dxerr8.h
  • dxerr9.h
  • errno.h
  • errorrep.h
  • exception
  • exception_defines.h
  • excpt.h
  • exdisp.h
  • exdispid.h
  • fcntl.h
  • fenv.h
  • float.h
  • fstream
  • functional
  • g++.exe
    .exe windows:4 windows x86 arch:x86

    8c5fd423f07232cff77d38c808b78fe9


    Headers

    Imports

    Sections

  • gcc.exe
    .exe windows:4 windows x86 arch:x86

    8c5fd423f07232cff77d38c808b78fe9


    Headers

    Imports

    Sections

  • gccbug
    .sh linux
  • gcov.exe
    .exe windows:4 windows x86 arch:x86

    ceaff3f505791f14a508f457e544fa6a


    Headers

    Imports

    Sections

  • gdb.exe
    .exe windows:4 windows x86 arch:x86

    e8e0e32d899fb189c81b56e6e61ce164


    Headers

    Imports

    Sections

  • getopt.h
  • gmon.h
  • gprof.exe
    .exe windows:4 windows x86 arch:x86

    dbf58c8433c9f414bf8061e67d732904


    Headers

    Imports

    Sections

  • httpext.h
  • idispids.h
  • imagehlp.h
  • imm.h
  • initguid.h
  • intshcut.h
  • inttypes.h
  • io.h
  • iomanip
  • ios
  • iosfwd
  • iostream
  • ipexport.h
  • iphlpapi.h
  • ipifcons.h
  • iprtrmib.h
  • iptypes.h
  • isguids.h
  • istream
  • iterator
  • largeint.h
  • ld.exe
    .exe windows:4 windows x86 arch:x86

    ec3635226f92fddcf5ea7e32beb56cef


    Headers

    Imports

    Sections

  • limits
  • limits.h
  • list
  • lm.h
  • lmaccess.h
  • lmalert.h
  • lmapibuf.h
  • lmat.h
  • lmaudit.h
  • lmbrowsr.h
  • lmchdev.h
  • lmconfig.h
  • lmcons.h
  • lmerr.h
  • lmerrlog.h
  • lmmsg.h
  • lmremutl.h
  • lmrepl.h
  • lmserver.h
  • lmshare.h
  • lmsname.h
  • lmstats.h
  • lmsvc.h
  • lmuse.h
  • lmuseflg.h
  • lmwksta.h
  • locale
  • locale.h
  • lzexpand.h
  • make.exe
    .exe windows:4 windows x86 arch:x86

    82348f63262968570dbb4c7db5bceefe


    Headers

    Imports

    Exports

    Sections

  • malloc.h
  • map
  • mapi.h
  • math.h
  • mbctype.h
  • mbstring.h
  • mciavi.h
  • mcx.h
  • mem.h
  • memory
  • memory.h
  • mgmtapi.h
  • mingw32-c++.exe
    .exe windows:4 windows x86 arch:x86

    8c5fd423f07232cff77d38c808b78fe9


    Headers

    Imports

    Sections

  • mingw32-g++.exe
    .exe windows:4 windows x86 arch:x86

    8c5fd423f07232cff77d38c808b78fe9


    Headers

    Imports

    Sections

  • mingw32-gcc-3.4.2
    .exe windows:4 windows x86 arch:x86

    8c5fd423f07232cff77d38c808b78fe9


    Headers

    Imports

    Sections

  • mingw32-gcc.exe
    .exe windows:4 windows x86 arch:x86

    8c5fd423f07232cff77d38c808b78fe9


    Headers

    Imports

    Sections

  • mingw32-make.exe
    .exe windows:4 windows x86 arch:x86

    82348f63262968570dbb4c7db5bceefe


    Headers

    Imports

    Exports

    Sections

  • mingwm10.dll
    .dll windows:4 windows x86 arch:x86

    222fef49e546c15cb628c93f567fe27b


    Headers

    Imports

    Exports

    Sections

  • mmsystem.h
  • msacm.h
  • mshtml.h
    .js
  • mswsock.h
  • nb30.h
  • nddeapi.h
  • new
  • nm.exe
    .exe windows:4 windows x86 arch:x86

    daaf50338975857b4fba637996c6a3d4


    Headers

    Imports

    Sections

  • nspapi.h
  • ntdef.h
  • ntdll.h
  • ntldap.h
  • ntsecapi.h
  • ntsecpkg.h
  • numeric
  • oaidl.h
  • objbase.h
  • objcopy.exe
    .exe windows:4 windows x86 arch:x86

    751eeab9d07f80b94d35e5c6ecd33baa


    Headers

    Imports

    Sections

  • objdump.exe
    .exe windows:4 windows x86 arch:x86

    b5b73640ca5940d42813c61fd2638ef9


    Headers

    Imports

    Sections

  • objfwd.h
  • objidl.h
  • ocidl.h
  • odbcinst.h
  • ole.h
  • ole2.h
  • ole2ver.h
  • oleacc.h
  • oleauto.h
  • olectl.h
  • olectlid.h
  • oledlg.h
  • oleidl.h
  • ostream
  • pbt.h
  • poppack.h
  • powrprof.h
  • process.h
  • profil.h
  • profile.h
  • prsht.h
  • psapi.h
  • pshpack1.h
  • pshpack2.h
  • pshpack4.h
  • pshpack8.h
  • queue
  • ranlib.exe
    .exe windows:4 windows x86 arch:x86

    02bb17b8975e6c3ece1eb199baf12355


    Headers

    Imports

    Sections

  • rapi.h
  • ras.h
  • rasdlg.h
  • raserror.h
  • rassapi.h
  • readelf.exe
    .exe windows:4 windows x86 arch:x86

    995a9fc6e618c88400d6bf1974c0abea


    Headers

    Imports

    Sections

  • regstr.h
  • richedit.h
  • richole.h
  • rm.exe
    .exe windows:4 windows x86 arch:x86

    8e8f692dedbda0c38c3e9d64ad2c5793


    Headers

    Imports

    Sections

  • rpc.h
  • rpcdce.h
  • rpcdce2.h
  • rpcdcep.h
  • rpcndr.h
  • rpcnsi.h
  • rpcnsip.h
  • rpcnterr.h
  • rpcproxy.h
  • schannel.h
  • schnlsp.h
  • scrnsave.h
  • search.h
  • secext.h
  • security.h
  • servprov.h
  • set
  • setjmp.h
  • setupapi.h
  • share.h
  • shellapi.h
  • shldisp.h
  • shlguid.h
  • shlobj.h
  • shlwapi.h
  • signal.h
  • size.exe
    .exe windows:4 windows x86 arch:x86

    a52e94e84899f1ce74d0ec6851bbc2d5


    Headers

    Imports

    Sections

  • snmp.h
  • sql.h
  • sqlext.h
  • sqltypes.h
  • sqlucode.h
  • sspi.h
  • sstream
  • stack
  • stdarg.h
  • stddef.h
  • stdexcept
  • stdint.h
  • stdio.h
  • stdlib.h
  • streambuf
  • string
  • string.h
  • strings.exe
    .exe windows:4 windows x86 arch:x86

    147376d1fef982e79883720b5c41095d


    Headers

    Imports

    Sections

  • strings.h
  • strip.exe
    .exe windows:4 windows x86 arch:x86

    751eeab9d07f80b94d35e5c6ecd33baa


    Headers

    Imports

    Sections

  • subauth.h
  • svcguid.h
  • symcat.h
  • tchar.h
  • time.h
  • tlhelp32.h
  • tmschema.h
  • typeinfo
  • unistd.h
  • unknwn.h
  • userenv.h
  • utility
  • utime.h
  • uxtheme.h
  • valarray
  • values.h
  • varargs.h
  • vector
  • vfw.h
  • w32api.h
  • wchar.h
  • wctype.h
  • winable.h
  • winbase.h
  • winber.h
  • wincon.h
  • wincrypt.h
  • windef.h
  • windns.h
  • windows.h
  • windowsx.h
  • windres.exe
    .exe windows:4 windows x86 arch:x86

    5e0c544c439d48a24658933d637a50cc


    Headers

    Imports

    Sections

  • winerror.h
  • wingdi.h
  • wininet.h
  • winioctl.h
  • winldap.h
  • winnetwk.h
  • winnls.h
  • winnt.h
  • winperf.h
  • winreg.h
  • winresrc.h
  • winsnmp.h
  • winsock.h
  • winsock2.h
  • winspool.h
  • winsvc.h
  • winuser.h
  • winver.h
  • ws2spi.h
  • ws2tcpip.h
  • wsahelp.h
  • wsipx.h
  • wsnetbs.h
  • wtypes.h
  • zmouse.h