General

  • Target

    9693e17639078fb71b28182696abc99b_JaffaCakes118

  • Size

    2.1MB

  • MD5

    9693e17639078fb71b28182696abc99b

  • SHA1

    855bfe70e30f035717c024671b867ba69021ee7e

  • SHA256

    b49423b749ab4b726ff0b407f08fca4d478241f4e6871b34f9dd76dcbc0abe79

  • SHA512

    870a4bedb1c7a8ee12970c3fa33b50a939e7c12445309deaf876c23cda254913584066c3b7c72c63e98a51e0c9bdc7cbc414c5e8944f35be945a12ae1abad697

  • SSDEEP

    49152:XzTB1CjOlI+tN9B7ndw2yIYJQcGRbGYyI8D1mxk:X7dlI0Pnw2yIQBIbGYy7Ixk

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 9693e17639078fb71b28182696abc99b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $R0
    .dll regsvr32 windows:4 windows x86 arch:x86

    3708bef5cd6e5fb503b4de6477d1b421


    Headers

    Imports

    Exports

    Sections

  • $R2/NSIS.Library.RegTool.v3.$_4_.exe
    .exe windows:4 windows x86 arch:x86

    a56a9c58ddb2b2da8fde66551747ce70


    Headers

    Imports

    Sections

  • $SYSDIR/lame_enc.dll
    .dll windows:4 windows x86 arch:x86

    fa173586a4b0eb0918ead3f1c5015cc2


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/libsndfile.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • bin/COPYING.LGPL
  • bin/lame_enc.dll
    .dll windows:4 windows x86 arch:x86

    fa173586a4b0eb0918ead3f1c5015cc2


    Headers

    Imports

    Exports

    Sections

  • bin/libsndfile.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • bin/readme.txt