Overview

overview

7

Static

static

7

adc2dc3050...18.exe

windows7-x64

7

adc2dc3050...18.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Ancientspider.exe

windows7-x64

7

Ancientspider.exe

windows10-2004-x64

7

DTDJ_1.exe

windows7-x64

3

DTDJ_1.exe

windows10-2004-x64

3

Xtras/Devi...nd.dll

windows7-x64

3

Xtras/Devi...nd.dll

windows10-2004-x64

3

Xtras/Flas...et.dll

windows7-x64

3

Xtras/Flas...et.dll

windows10-2004-x64

3

Xtras/Medi...ol.dll

windows7-x64

3

Xtras/Medi...ol.dll

windows10-2004-x64

3

Xtras/Medi...pr.dll

windows7-x64

3

Xtras/Medi...pr.dll

windows10-2004-x64

3

Xtras/budapi.dll

windows7-x64

3

Xtras/budapi.dll

windows10-2004-x64

3

Xtras/fileio.dll

windows7-x64

3

Xtras/fileio.dll

windows10-2004-x64

3

dirapi.dll

windows7-x64

7

dirapi.dll

windows10-2004-x64

7

iml32.dll

windows7-x64

7

iml32.dll

windows10-2004-x64

7

msvcrt.dll

windows7-x64

7

msvcrt.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    adc2dc3050b26eaf2d29ef28ff1b4734_JaffaCakes118

  • Size

    5.4MB

  • MD5

    adc2dc3050b26eaf2d29ef28ff1b4734

  • SHA1

    25068744f87a4aeda778658f44f17d37a3dddc76

  • SHA256

    2d1665c7e5e6376df20f1f8edb8fc66381935f16a4da1e1972c254198b75426e

  • SHA512

    80429a3b691a1a99471e647f299b9ad8e8e61ffa19dfb4af6f0130f9bab41c9d4a8ff364525cef5b67852f5d017cf9ca73ca3ab614efb09872a1e0a49ed4b57c

  • SSDEEP

    98304:tMpD0TiKZp6A7qGX1pfdkGI5l+b0XLAvVGYS3kBq1Pk1tfzNkRupUdp2kG2wvAmu:t+2iGb7qw1pfyDlo0XLgUWvzWE4GMP

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 4 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • adc2dc3050b26eaf2d29ef28ff1b4734_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    711c893e4d8189fd14b6563a4e35e663


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    946eb0a1e85c9ade4acaf634eb5a64f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Ancientspider.exe
    .exe windows:4 windows x86 arch:x86

    6fe733fb81e119ab8b4b38b36852e63c


    Headers

    Imports

    Sections

  • DTDJ_1.exe
    .exe windows:5 windows x86 arch:x86

    4dbc5d08df28b8f55d5238d42ee67fa8


    Headers

    Imports

    Sections

  • INSTALL.LOG
  • Main_dtdj.ini
  • Prefs/Ancient Spider.txt
  • Prefs/AntsHigh.txt
  • Prefs/AntsResume.txt
  • Prefs/AntsStartState.txt
  • Prefs/AntsStats.txt
  • Prefs/BlackSpiderHigh.txt
  • Prefs/BlackSpiderStats.txt
  • Prefs/BlackWidowHigh.txt
  • Prefs/BlackWidowStats.txt
  • Prefs/CobWebHigh.txt
  • Prefs/CobWebStats.txt
  • Prefs/SpiderHigh.txt
  • Prefs/SpiderOneHigh.txt
  • Prefs/SpiderOneResume.txt
  • Prefs/SpiderOneStartState.txt
  • Prefs/SpiderOneStats.txt
  • Prefs/SpiderStats.txt
  • Prefs/SpiderTwoHigh.txt
  • Prefs/SpiderTwoStats.txt
  • Prefs/TarantulaHigh.txt
  • Prefs/TarantulaStats.txt
  • Xtras/Devices/directsound.x32
    .dll windows:4 windows x86 arch:x86

    0bbfbf636680b8224b87e3871096b677


    Headers

    Imports

    Exports

    Sections

  • Xtras/Flash Asset/flash asset.x32
    .dll windows:4 windows x86 arch:x86

    6317f45dc7fd15af672b01ccef700ff2


    Headers

    Imports

    Exports

    Sections

  • Xtras/Media Support/sound control.x32
    .dll windows:4 windows x86 arch:x86

    6edd253b068bbe35d0eadf8c21d25599


    Headers

    Imports

    Exports

    Sections

  • Xtras/Media Support/swadcmpr.x32
    .dll windows:4 windows x86 arch:x86

    e754f4d9c06df1d7465c2056cd68787f


    Headers

    Imports

    Exports

    Sections

  • Xtras/budapi.x32
    .dll windows:4 windows x86 arch:x86

    2bbc9d08892b56ae84ed50be66346fc9


    Headers

    Imports

    Exports

    Sections

  • Xtras/fileio.x32
    .dll windows:1 windows x86 arch:x86

    77e98ac48c8e9485b6b4ed5afd295919


    Headers

    Imports

    Exports

    Sections

  • dirapi.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • iml32.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • launch.ini
  • msvcrt.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • proj.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • readme.txt
  • setup.ini
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • version.txt
  • xtras/save as java files/javauihelper.x32
    .dll windows:4 windows x86 arch:x86

    376c8ace8863d38be9ddafc6b26a19e9


    Headers

    Imports

    Exports

    Sections