General

  • Target

    88cf0aabf52fac9baa92852fbd820aad_JaffaCakes118

  • Size

    2.5MB

  • MD5

    88cf0aabf52fac9baa92852fbd820aad

  • SHA1

    057e69a50ca0a6d6d32bc4c8e8ebed741a71f1bc

  • SHA256

    15f5b45aef56403700835fa0de877490decdcccca345c29007d667523f8c36be

  • SHA512

    cb3cd74332823079079a85e929f4bc93181a0a54e5f2fe31d30cef7b7790fca79e9a779bc94cb583fd8e1e1430359b398ff89678e74b78541ecf94b0d28d9722

  • SSDEEP

    49152:ac/uAuxkqGTJE0het/GDRhxL37+xu6wysN4zOfmbpxnrA9lPN2X3AeqDp3wagBhH:1W67TJket7ktm4CObAXIMlDuVw/2

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 5 IoCs

    Detects file using ACProtect software.

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 88cf0aabf52fac9baa92852fbd820aad_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    a3b0ee1fb29253dbfbd34b387e7a55c9


    Code Sign

    Headers

    Imports

    Sections

  • DbgHelp.dll
    .dll windows:5 windows x86 arch:x86

    515ee46e8930abe46e0569a1a18643ae


    Headers

    Imports

    Exports

    Sections

  • MFC71u.dll
    .dll windows:4 windows x86 arch:x86

    b3fbf4599c17e9bc7ccae6518bf0f868


    Headers

    Imports

    Sections

  • MercoraClient.exe
    .exe windows:4 windows x86 arch:x86

    8c7ab22cd5f529eb2e94b6adf2e8c2ad


    Headers

    Imports

    Sections

  • MercoraHook.dll
    .dll windows:4 windows x86 arch:x86

    7da5b55825258168bd9ba507dc56fb92


    Headers

    Imports

    Exports

    Sections

  • Plugins/AIMDll.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Plugins/ICQdll.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Plugins/MSNDll.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Plugins/MercoraActiveX.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Plugins/MunduDomains.ini
  • Plugins/OGG.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f4e7fbd1c19bf8e73c698592d0f87e26


    Headers

    Imports

    Exports

    Sections

  • Plugins/YahooDll.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Skins/Default/CBaseWnd.bmp
  • Skins/Default/CChannelsHeaderBarCtrl.bmp
  • Skins/Default/CChatHeaderBarCtrl.bmp
  • Skins/Default/CColumnHeaderCtrl.bmp
  • Skins/Default/CDialog.Watermark.jpg
    .jpg
  • Skins/Default/CGroupSubHeaderBarCtrl.bmp
  • Skins/Default/CHSplitCtrl.bmp
  • Skins/Default/CHeaderTile.bmp
  • Skins/Default/CMediaImage.bmp
  • Skins/Default/CMusicHeaderBarCtrl.bmp
  • Skins/Default/CPlaylistHeaderBarCtrl.bmp
  • Skins/Default/CPrimaryFrameWnd.bmp
  • Skins/Default/CRecordHeaderBarCtrl.bmp
  • Skins/Default/CRecordingTimeCtrl.bmp
  • Skins/Default/CSearchHeaderCtrl.bmp
  • Skins/Default/CStatusButton.bmp
  • Skins/Default/CUserChatWnd.bmp
  • Skins/Default/CUserSubHeaderBarCtrl.bmp
  • Skins/Default/CVSplitCtrl.bmp
  • Skins/Default/CWebHeaderBarCtrl.bmp
  • Skins/Default/Default.xml
    .xml
  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • unicows.dll
    .dll windows:5 windows x86 arch:x86

    628730441f2453f40c61ce661f08e0ca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninstall.exe.nsis