General

  • Target

    aa3c792f8d0bd8808fc507c09a6918af_JaffaCakes118

  • Size

    5.5MB

  • MD5

    aa3c792f8d0bd8808fc507c09a6918af

  • SHA1

    2f615fb93a8d25dce3355287d261e22751e713a1

  • SHA256

    b6edd2c1c655692c07d0ffd83684c5cf6562d8679a6499cf5581c790a5337a44

  • SHA512

    6c7d09a83f76fde3d59ca6bfd12816cc307d59ed546e274a9bf66264732bf77393e5cb8a6e66fae160a9d9457dcffa025f51d28848f4f06253269ff3e89cb659

  • SSDEEP

    98304:KHMcvLAIUToFvKHKlhPCfm+/F4rXxhbmDNoyrb5f0VCCaL5hwE8ng4Gdg:AmIiopKChErWh+WyrlnhFav

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 39 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • aa3c792f8d0bd8808fc507c09a6918af_JaffaCakes118
    .rar
  • arn.nfo
  • setup.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    28d94e5199b88ad374b3cb2118e31a66


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsisdll.dll
    .dll windows:4 windows x86 arch:x86

    7a1b2222bcad8848ee1e1190f24f1473


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/serial.ini
  • 123key.exe
    .exe windows:4 windows x86 arch:x86

    21408485e9c4d3dfa193286ce8b8fc5b


    Headers

    Imports

    Sections

  • acbtkey.exe
    .exe windows:4 windows x86 arch:x86

    029bb465c3fc43968f839633c2b895a0


    Headers

    Imports

    Sections

  • actkey.exe
    .exe windows:4 windows x86 arch:x86

    8213451e5c8ffd3261b1f8da1ac99587


    Headers

    Imports

    Sections

  • ariskkey.dll
    .dll windows:4 windows x86 arch:x86

    b52d799c44c87a199ae8aec934147fc4


    Headers

    Imports

    Exports

    Sections

  • ariskkey.exe
    .exe windows:4 windows x86 arch:x86

    c8b57a6e4c7fc5114b95fc746ae23014


    Headers

    Imports

    Sections

  • bckey.exe
    .exe windows:4 windows x86 arch:x86

    53cb964a8e88654faae4aa508c6f2efc


    Headers

    Imports

    Sections

  • bckupkey.exe
    .exe windows:4 windows x86 arch:x86

    b5263785dabec82d2d37acbb4bce0d67


    Headers

    Imports

    Sections

  • dict.txt
  • efsdll.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • efskey.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • fmkey.exe
    .exe windows:4 windows x86 arch:x86

    562af7036117848b4446cbf594e5b75a


    Headers

    Imports

    Sections

  • iekey.exe
    .exe windows:4 windows x86 arch:x86

    33fb232f8d16aec4325b343cca3669a0


    Headers

    Imports

    Sections

  • lnkey.exe
    .exe windows:4 windows x86 arch:x86

    f3d2e28653f26430643548906b71e1b5


    Headers

    Imports

    Sections

  • mailkey.exe
    .exe windows:4 windows x86 arch:x86

    4a16441a0ff60a4e8139780d7fa1ce4b


    Headers

    Imports

    Sections

  • moneykey.exe
    .exe windows:4 windows x86 arch:x86

    a0d047e43334553486ffe9f94b090cb4


    Headers

    Imports

    Sections

  • msgrkey.exe
    .exe windows:4 windows x86 arch:x86

    590a5293ee8dbff4d3509fbc07956466


    Headers

    Imports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • myobkey.exe
    .exe windows:4 windows x86 arch:x86

    3aa2084f5eabe82750338f0678e13b56


    Headers

    Imports

    Sections

  • nckey.exe
    .exe windows:4 windows x86 arch:x86

    2444c429380e1fdd78ed9a6b3bfa108f


    Headers

    Imports

    Sections

  • oekey.exe
    .exe windows:4 windows x86 arch:x86

    6666c6f432c73086f1f3e676a4c2a093


    Headers

    Imports

    Sections

  • offkey.exe
    .exe windows:4 windows x86 arch:x86

    9b6c8733f052ff01c3bbb0e5fcac65b3


    Headers

    Imports

    Sections

  • onkey.exe
    .exe windows:4 windows x86 arch:x86

    324d1986d39c15f16ea0cf9320766200


    Headers

    Imports

    Sections

  • orgkey.exe
    .exe windows:4 windows x86 arch:x86

    36955c89c05357e24da1410306f29d20


    Headers

    Imports

    Sections

  • pdoxkey.exe
    .exe windows:4 windows x86 arch:x86

    9a25d538bfe2eb0df60ef30e22557bce


    Headers

    Imports

    Sections

  • peachkey.exe
    .exe windows:4 windows x86 arch:x86

    131ccc5f947831f17ea373d1f2de8641


    Headers

    Imports

    Sections

  • pk.chm
    .chm
  • pk80.dll
    .dll windows:4 windows x86 arch:x86

    03ec0b396636fc50248b65487feca2c6


    Headers

    Imports

    Exports

    Sections

  • projkey.exe
    .exe windows:4 windows x86 arch:x86

    07870c49dd2c6c156f7b1c67ba752abf


    Headers

    Imports

    Sections

  • qbkey.exe
    .exe windows:4 windows x86 arch:x86

    735fd907e6fb7860d175d83fe17659bb


    Headers

    Imports

    Sections

  • qpkey.exe
    .exe windows:4 windows x86 arch:x86

    54591c83a06b6a6ad8d758b2e4e2e64d


    Headers

    Imports

    Sections

  • quickey.exe
    .exe windows:4 windows x86 arch:x86

    e5b45897302ee5c774f8ebbfc892ee41


    Headers

    Imports

    Sections

  • rarkey.exe
    .exe windows:4 windows x86 arch:x86

    6cec22a55e074bebdbc971025d2abb85


    Headers

    Imports

    Sections

  • scdkey.exe
    .exe windows:4 windows x86 arch:x86

    be1a582eabc3cdc7e200785c35b26674


    Headers

    Imports

    Sections

  • sqlkey.exe
    .exe windows:4 windows x86 arch:x86

    345f3670b12de62c2890bb001ec59b2c


    Headers

    Imports

    Sections

  • un-kit_ent.exe.nsis
  • winkey.exe
    .exe windows:4 windows x86 arch:x86

    4421ca74ac20496bc3aa5f3080e6caf0


    Headers

    Imports

    Sections

  • wpkey.exe
    .exe windows:4 windows x86 arch:x86

    ec284d5c125af273fe66840406d6ac16


    Headers

    Imports

    Sections

  • wprokey.exe
    .exe windows:4 windows x86 arch:x86

    2397cc40ac7f7929a7a84bbc402c4c42


    Headers

    Imports

    Sections

  • zipkey.exe
    .exe windows:4 windows x86 arch:x86

    08d1477a65a587c45d2a04d219adda38


    Headers

    Imports

    Sections

  • 安装说明.url
    .url