Overview

overview

7

Static

static

7

b0f939ae8c...18.exe

windows7-x64

7

b0f939ae8c...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

7

FileZilla.chm

windows7-x64

1

FileZilla.chm

windows10-2004-x64

1

FileZilla.exe

windows7-x64

3

FileZilla.exe

windows10-2004-x64

3

FzGSS.dll

windows7-x64

3

FzGSS.dll

windows10-2004-x64

3

FzResBr.dll

windows7-x64

1

FzResBr.dll

windows10-2004-x64

1

FzResBu.dll

windows7-x64

1

FzResBu.dll

windows10-2004-x64

1

FzResCa.dll

windows7-x64

1

FzResCa.dll

windows10-2004-x64

1

FzResCh.dll

windows7-x64

1

FzResCh.dll

windows10-2004-x64

1

FzResChs.dll

windows7-x64

1

FzResChs.dll

windows10-2004-x64

1

FzResCze.dll

windows7-x64

1

FzResCze.dll

windows10-2004-x64

1

FzResDe.dll

windows7-x64

1

FzResDe.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    b0f939ae8c2e484c529310b95020a2fc_JaffaCakes118

  • Size

    3.3MB

  • MD5

    b0f939ae8c2e484c529310b95020a2fc

  • SHA1

    4a9cb58abb0a12a7fdf3504aecd03bcfe1c207d0

  • SHA256

    2eaa3ed74ac8a6f995378074b71a454af7cb926bb0042011ce6d12cba048722c

  • SHA512

    811ca637fb594ff21d9d8150d37f30e76c954a834681e4a68f3fcf061f8b9a8b0fee6646cb285afe04b94e21834c185b425cb52100019a1683c61e20e9e99797

  • SSDEEP

    98304:p6amVzNWC5rgmWKp+xvpgUlKiQ3cjE8QSlDJXt40:pRmNNF87w+bhRiSwi40

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 31 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • b0f939ae8c2e484c529310b95020a2fc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    73b73e00f465fa1a2a3bf6377a40219b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    2db813254ea8b4d2a92d703ecb659f39


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    d79c2fe1aafe446fbd9b984f61377e3e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/download.ini
  • $PLUGINSDIR/settings.ini
  • FileZilla.chm
    .chm
  • FileZilla.exe
    .exe windows:4 windows x86 arch:x86

    6a56bb50489d9001bf712dc8fe88ddbc


    Headers

    Imports

    Sections

  • FileZilla.pdb
  • FzGSS.dll
    .dll windows:4 windows x86 arch:x86

    08796165a105f4d90e8821cb12ded587


    Headers

    Imports

    Exports

    Sections

  • FzResBr.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzResBu.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzResCa.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzResCh.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzResChs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzResCze.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzResDe.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzResEs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzResFr.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzResHu.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzResIt.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzResJp.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzResKr.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzResNor.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzResPo.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzResRu.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzResSk.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FzSFtp.exe
    .exe windows:4 windows x86 arch:x86

    11d36808489068fe511083197c6a326f


    Headers

    Imports

    Sections

  • GPL.html
    .html
  • dbghelp.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • legal.htm
    .html
  • libeay32.dll
    .dll windows:4 windows x86 arch:x86

    7fc6c6cf705f8da2f5417e5f94380b41


    Headers

    Imports

    Exports

    Sections

  • puttylicense.html
  • readme.htm
    .html
  • ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    c8e555eabfe09b2feab2313db124fc78


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    73b73e00f465fa1a2a3bf6377a40219b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    2db813254ea8b4d2a92d703ecb659f39


    Headers

    Imports

    Exports

    Sections