General

  • Target

    86b2611e9f64a638056894150dd3859a_JaffaCakes118

  • Size

    1.7MB

  • MD5

    86b2611e9f64a638056894150dd3859a

  • SHA1

    d7ae3ded801457da4d600f1a010bbab65d727ea2

  • SHA256

    963dd1f173ff2eba994f6ead3cf33ed7a9c6d5f067494a3a3c1b12253e986c3e

  • SHA512

    17abe59a1cf44914b50eb2bcbf5e8d55a06c1d5d767022be143ed8ee37476d2225b59dc7ad6b0cc35e3059582007bc630aaf576483fbe372c5f9bef8ce0195a7

  • SSDEEP

    49152:Nw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFMmeYoeGkeJNfbn8u3UPKupb:N+XYoeGkKAuE5ps7WP0rLxsUCpjF

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 86b2611e9f64a638056894150dd3859a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OnTop.dll
    .dll windows:4 windows x86 arch:x86

    5868b2e27b7dc96acf77699398b4c95b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsWebJPDesk.dll
    .dll windows:5 windows x86 arch:x86

    f6f7bfe1f9d2a8bd695966f3ef854b36


    Headers

    Imports

    Exports

    Sections

  • $TEMP/UpdateInfo.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Background/͸/background.ini
  • Background/͸/background_Horz.png
    .png
  • Background/͸/background_Vert.png
    .png
  • Background/͸/separator_Horz.png
    .png
  • Background/͸/separator_Vert.png
    .png
  • Background//background.ini
  • Background//background_Left.png
    .png
  • Background//background_Right.png
    .png
  • Background//background_Top.png
    .png
  • Background//background_bottom.png
    .png
  • Background//separator Right.png
    .png
  • Background//separator bottom.png
    .png
  • Background//separator left.png
    .png
  • Background//separator top.png
    .png
  • Background//background.ini
  • Background//background_Left.png
    .png
  • Background//background_Right.png
    .png
  • Background//background_Top.png
    .png
  • Background//background_bottom.png
    .png
  • Background//separator Right.png
    .png
  • Background//separator bottom.png
    .png
  • Background//separator left.png
    .png
  • Background//separator top.png
    .png
  • Background//background.ini
  • Background//background_Left.png
    .png
  • Background//background_Right.png
    .png
  • Background//background_Top.png
    .png
  • Background//background_bottom.png
    .png
  • Background//separator left-Right.png
    .png
  • Background//separator top-bottom.png
    .png
  • Default.png.tmp
    .png
  • PicLib/System/Almanac.png
    .png
  • PicLib/System/DesktopBG.jpg
    .jpg
  • PicLib/System/DesktopBg1.jpg
    .jpg
  • PicLib/System/Lock.png
    .png
  • PicLib/System/MyComputer.png
    .png
  • PicLib/System/MyDocument.png
    .png
  • PicLib/System/NetWork.png
    .png
  • PicLib/System/QQ.png
    .png
  • PicLib/System/Recycle_Full.png
    .png
  • PicLib/System/Recycle_empty.png
    .png
  • PicLib/System/SearchPage.png
    .png
  • PicLib/System/Weather.png
    .png
  • PicLib/System/folder.png
    .png
  • PicLib/System/iexplore.png
    .png
  • PicLib/System/msnmsgr.png
    .png
  • PicLib/System/taobao.png
    .png
  • PicLib/System/wmplayer.png
    .png
  • jpdesk.exe
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • poof.png.tmp
    .png
  • uninst.exe.nsis
  • updateinfo.txt.tmp