General

  • Target

    af253fa381566c0bb696c40a71751d0b_JaffaCakes118

  • Size

    676KB

  • MD5

    af253fa381566c0bb696c40a71751d0b

  • SHA1

    5b52e7ee6d81bfc134b9b217ec434af9ea1ce8d5

  • SHA256

    a8f4268e34e4d7d970547518a3901b4e1b66c6e6bad50e7564baae882e2116ec

  • SHA512

    364aa01ba4ca8f6bc001606f8364b5a37e35a90e78049a6f279b10d794a26ea707436f5f40dfd7f67ca73958d24c09826cd10eb6dcc61c23227e223c49d77b41

  • SSDEEP

    12288:PPaVCO1luZOKORtswsJuw2pu3GbJzckee9KoKreLZO:naIK1NHjtBeeYoKreY

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • af253fa381566c0bb696c40a71751d0b_JaffaCakes118
    .rar
  • clndisk.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    6bc108eed3ca99f68adee56e9c99fac6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/version.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $R0
    .dll regsvr32 windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $R2/NSIS.Library.RegTool.v2.$HWNDPARENT.exe
    .exe windows:4 windows x86 arch:x86

    a56a9c58ddb2b2da8fde66551747ce70


    Headers

    Imports

    Sections

  • CLNSWAP.EXE
  • clndisk.chm
    .chm
  • clndisk.cnt
  • clndisk.doc
  • clndisk.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • clnswap.doc
  • plugineditor.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • plugins/7-zip compression.cdp
  • plugins/Java cache.cdp
  • plugins/absoluteftp.cdp
  • plugins/acdsee.cdp
  • plugins/acoustica cd label maker.cdp
  • plugins/acrobat reader 4.cdp
  • plugins/acrobat reader 5.cdp
  • plugins/acrobat reader 6.cdp
  • plugins/acrobat reader 7.cdp
  • plugins/ad-aware 6.cdp
  • plugins/adaptec easy cd creator.cdp
  • plugins/adaptec's audio cd.cdp
  • plugins/addsoft log files.cdp
  • plugins/addweb 3.cdp
  • plugins/adobe photoshop 6.cdp
  • plugins/adobe photoshop 7.cdp
  • plugins/adobe photoshop cs 8.cdp
  • plugins/adobe photoshop cs2 9.cdp
  • plugins/adobe photoshop cs3.cdp
  • plugins/advanced disk catalog.cdp
  • plugins/advanced mp3 catalog.cdp
  • plugins/agent newsreader.cdp
  • plugins/agnitum outpost pro.cdp
  • plugins/aim login names.cdp
  • plugins/alcohol mru.cdp
  • plugins/aol bart.cdp
  • plugins/aol instant messenger.cdp
  • plugins/aol spool.cdp
  • plugins/audiocatalyst.cdp
  • plugins/audiograbber.cdp
  • plugins/autodesk autocad 2002.cdp
  • plugins/autodesk autocad 2004.cdp
  • plugins/autodesk autocad 2005.cdp
  • plugins/avant browser history.cdp
  • plugins/ax-icons 4.cdp
  • plugins/axialis icon workshop 5.cdp
  • plugins/axialis media browser.cdp
  • plugins/babylon builder 2.cdp
  • plugins/babylon.cdp
  • plugins/bearshare.cdp
  • plugins/belltech business cards designer.cdp
  • plugins/blazedvd 2.cdp
  • plugins/bookreader.cdp
  • plugins/borland delphi v7.cdp
  • plugins/cabinet manager.cdp
  • plugins/chameleon web browser.cdp
  • plugins/chkdsk file fragments.cdp
  • plugins/classify 98.cdp
  • plugins/coffeecup directftp.cdp
  • plugins/coffeecup gif animator.cdp
  • plugins/cool edit 2000 1.cdp
  • plugins/cool edit pro.cdp
  • plugins/copernic 2001 basic.cdp
  • plugins/copernic 2001 plus.cdp
  • plugins/copernic 2001 pro.cdp
  • plugins/crt 2.cdp
  • plugins/cute mx.cdp
  • plugins/cuteftp.cdp
  • plugins/cutehtml.cdp
  • plugins/disk explorer professional 3.cdp
  • plugins/diskeeper 5.cdp
  • plugins/divx player.cdp
  • plugins/dlexpert.cdp
  • plugins/download accelerator.cdp
  • plugins/downloaded installations.cdp
  • plugins/dvd shrink.cdp
  • plugins/ebay toolbar.cdp
  • plugins/editpad.cdp
  • plugins/emule logs.cdp
  • plugins/emule.cdp
  • plugins/enfish onespace.cdp
  • plugins/enigma browser.cdp
  • plugins/eudora mail.cdp
  • plugins/flashget.cdp
  • plugins/fotostation 4.cdp
  • plugins/foxit reader.cdp
  • plugins/free download manager.cdp
  • plugins/ftp explorer.cdp
  • plugins/ftp voyager.cdp
  • plugins/fun cd.cdp
  • plugins/gator.cdp
  • plugins/getright.cdp
  • plugins/go!zilla.cdp
  • plugins/goldwave digital audio editor.cdp
  • plugins/google deskbar.cdp
  • plugins/google desktop search history.cdp
  • plugins/google earth.cdp
  • plugins/google toolbar.cdp
  • plugins/google video player.cdp
  • plugins/graphic workshop pro.cdp
  • plugins/gravity newsreader.cdp
  • plugins/helios textpad.cdp
  • plugins/homesite 4.cdp
  • plugins/hotbar 3.cdp
  • plugins/hotjava browser.cdp
  • plugins/icq 2002a.cdp
  • plugins/icq 2003a.cdp
  • plugins/imesh.cdp
  • plugins/inoculatelt pe virus scan.cdp
  • plugins/interquick.cdp
  • plugins/irfanview 32.cdp
  • plugins/jasc animation shop 3.cdp
  • plugins/jet photo shell.cdp
  • plugins/juno.cdp
  • plugins/k-lite codec pack.cdp
  • plugins/kazaa lite.cdp
  • plugins/kazaa media desktop.cdp
  • plugins/kodak imaging for windows.cdp
  • plugins/leapftp 2.cdp
  • plugins/leechget.cdp
  • plugins/letterbox.cdp
  • plugins/lingomail 1.cdp
  • plugins/lview pro 2.cdp
  • plugins/macromedia dreamweaver mx.cdp
  • plugins/macromedia firework mx.cdp
  • plugins/macromedia flash mx.cdp
  • plugins/macromedia flash player.cdp
  • plugins/magic iso maker 4.cdp
  • plugins/mass download.cdp
  • plugins/mastersplitter.cdp
  • plugins/mcafee virus scan.cdp
  • plugins/meda mp3 splitter.cdp
  • plugins/metapad.cdp
  • plugins/microangelo.cdp
  • plugins/micrografx picture publisher 8.cdp
  • plugins/microsoft html help.cdp
  • plugins/microsoft imaging.cdp
  • plugins/microsoft netmeeting.cdp
  • plugins/microsoft office 2000.cdp
  • plugins/microsoft office 2003.cdp
  • plugins/microsoft office 97.cdp
  • plugins/microsoft office infopath 2003.cdp
  • plugins/microsoft office xp.cdp
  • plugins/microsoft photo editor 3.cdp
  • plugins/microsoft publisher 2000.cdp
  • plugins/microsoft visual c++ 6.cdp
  • plugins/microsoft word 2000.cdp
  • plugins/microsoft word backup files.cdp
  • plugins/microsoft works 4.cdp
  • plugins/mijenix powerdesk 4.cdp
  • plugins/miranda icq.cdp
  • plugins/mirc.cdp
  • plugins/morpheus.cdp
  • plugins/mozart 4.cdp
  • plugins/mozilla_firefox.cdp
  • plugins/ms paint.cdp
  • plugins/msn messenger user account.cdp
  • plugins/msn messenger.cdp
  • plugins/msn toolbar.cdp
  • plugins/musicmatch jukebox.cdp
  • plugins/myway advertising.cdp
  • plugins/napster.cdp
  • plugins/naviscope.cdp
  • plugins/net vampire 3.cdp
  • plugins/netants.cdp
  • plugins/netcaptor.cdp
  • plugins/netsonic.cdp
  • plugins/netzip download demon.cdp
  • plugins/newsbin pro 4.cdp
  • plugins/norton anti-virus 2000.cdp
  • plugins/norton anti-virus 2003.cdp
  • plugins/norton commander.cdp
  • plugins/norton file manager.cdp
  • plugins/norton firewall.cdp
  • plugins/norton internet security.cdp
  • plugins/notepad plus.cdp
  • plugins/omnipage 10.cdp
  • plugins/opera 7.cdp
  • plugins/outlook express 5, 6.cdp
  • plugins/paint shop pro 5.cdp
  • plugins/paint shop pro 7.cdp
  • plugins/paint shop pro 8.cdp
  • plugins/paint shop pro 9.cdp
  • plugins/passwordsafe.cdp
  • plugins/pe explorer 1.cdp
  • plugins/personal ancestral file.cdp
  • plugins/photocanvas 2.cdp
  • plugins/photodex compupic pro.cdp
  • plugins/photodraw 2000.cdp
  • plugins/photoimpact viewer 4.cdp
  • plugins/photoimpact.cdp
  • plugins/picozip.cdp
  • plugins/pictureit digital image pro 7.cdp
  • plugins/pkzip for windows.cdp
  • plugins/polyview.cdp
  • plugins/popup purger.cdp
  • plugins/popupcop.cdp
  • plugins/powerarc.cdp
  • plugins/powerdesk 5.cdp
  • plugins/powerdvd.cdp
  • plugins/powerzip 6.cdp
  • plugins/quicktime.cdp
  • plugins/realnetworks real download.cdp
  • plugins/realone & realplayer.cdp
  • plugins/regedit.cdp
  • plugins/reget deluxe.cdp
  • plugins/roxio easy cd creator.cdp
  • plugins/save now.cdp
  • plugins/scour exchange.cdp
  • plugins/searchwolf.cdp
  • plugins/skype.cdp
  • plugins/smart explorer.cdp
  • plugins/smartdraw 6.cdp
  • plugins/sonic foundry's acid 2.cdp
  • plugins/sonique.cdp
  • plugins/spinner plus.cdp
  • plugins/spybot search and destroy.cdp
  • plugins/star downloader.cdp
  • plugins/staroffice 5.cdp
  • plugins/submitwolf.cdp
  • plugins/surething cd labeler.cdp
  • plugins/swish 2.cdp
  • plugins/teleport pro.cdp
  • plugins/textpad 4.cdp
  • plugins/thumbsplus 4.cdp
  • plugins/tribal voice's powwow.cdp
  • plugins/trillian.cdp
  • plugins/ulead gif animator.cdp
  • plugins/ulead photoexpress.cdp
  • plugins/ultimate paint.cdp
  • plugins/ultraedit.cdp
  • plugins/ultraiso.cdp
  • plugins/utorrent.cdp
  • plugins/vista saved searches.cdp
  • plugins/vueprint.cdp
  • plugins/webferret.cdp
  • plugins/webroot spysweeper.cdp
  • plugins/wildstylz.cdp
  • plugins/winace 2.cdp
  • plugins/winamp.cdp
  • plugins/windows app log directory.cdp
  • plugins/windows commander.cdp
  • plugins/windows common dialogs.cdp
  • plugins/windows ftp accounts.cdp
  • plugins/windows log files.cdp
  • plugins/windows mail mru.cdp
  • plugins/windows mapped drives.cdp
  • plugins/windows media player.cdp
  • plugins/windows memory dumps.cdp
  • plugins/windows muicache.cdp
  • plugins/windows recent network drive list.cdp
  • plugins/windows regedit recent key.cdp
  • plugins/windows xp prefetch folder.cdp
  • plugins/windows xp recent run programs.cdp
  • plugins/winiso.cdp
  • plugins/winrar.cdp
  • plugins/winzip.cdp
  • plugins/wordpad.cdp
  • plugins/xara 3d 4.cdp
  • plugins/xing mp3 player.cdp
  • plugins/xolox.cdp
  • plugins/yahoo! messenger.cdp
  • plugins/yahoo! player.cdp
  • plugins/yahoo! toolbar.cdp
  • plugins/yamaha s-yxg100.cdp
  • plugins/zipmagic.cdp
  • plugins/zone alarm.cdp
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • whatsnew.txt
  • 新云软件.url
    .url