Overview

overview

8

Static

static

8

78d130d362...18.exe

windows7-x64

4

78d130d362...18.exe

windows10-2004-x64

4

FsLauncher.exe

windows7-x64

3

FsLauncher.exe

windows10-2004-x64

7

JJangDiskDown.exe

windows7-x64

8

JJangDiskDown.exe

windows10-2004-x64

8

JJangDiskUp.exe

windows7-x64

3

JJangDiskUp.exe

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

enswerapi.dll

windows7-x64

3

enswerapi.dll

windows10-2004-x64

3

nat.dll

windows7-x64

7

nat.dll

windows10-2004-x64

8

unrar.dll

windows7-x64

3

unrar.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    78d130d3621308ab9e6aea088939f301_JaffaCakes118

  • Size

    6.7MB

  • MD5

    78d130d3621308ab9e6aea088939f301

  • SHA1

    424343ba778f10a0bc50aa4b10dc90d118e9c6b0

  • SHA256

    9b7e4f39efbe64a1e36769d8b04c8fb404c245a1914c3515cb6a36a5e718c6e9

  • SHA512

    4708f3447626a58fd1b485d759bc10bb7298274d051fcc01316ba3c588f169d45630f56b29c0fa360ab47401273e2ab2d65a311d751dd3dc53f31788bb752387

  • SSDEEP

    196608:W+kbE5ujbXa+MQuJFM+nQfdn8Ud61Ia8vEXvA1EAYjd:BkbE5wbKfFtjUd61j8vEfFFjd

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 78d130d3621308ab9e6aea088939f301_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • FsLauncher.exe
    .exe windows:4 windows x86 arch:x86

    9b68613a5e971847239d13cbe3624e1e


    Headers

    Imports

    Sections

  • JJangDisk.ico
  • JJangDiskDown.exe
    .exe windows:4 windows x86 arch:x86

    d9a279ec53b4dee8dc3e8230805d5bd2


    Headers

    Imports

    Sections

  • JJangDiskUp.exe
    .exe windows:4 windows x86 arch:x86

    6713dd19d4d94d8b86aaaaff40985e80


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • enswerapi.dll
    .dll windows:4 windows x86 arch:x86

    a0715cb0f483c1a9ac1099b7a266e4e9


    Headers

    Imports

    Exports

    Sections

  • nat.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • unrar.dll
    .dll windows:4 windows x86 arch:x86

    244d2f9772f4886a651db44514a2a29b


    Headers

    Imports

    Exports

    Sections

  • ver.ini