General

  • Target

    af4642c5401c868c587a0aad5837fbe4_JaffaCakes118

  • Size

    7.3MB

  • MD5

    af4642c5401c868c587a0aad5837fbe4

  • SHA1

    66380e6a6deae3437ba517692eb572d8072ac5d2

  • SHA256

    7bf62f181f281f259592906678acd83f1c297cda364128f7a9611687fa8b8021

  • SHA512

    e138d4c3dffec74bf30527e7b5b2520feb197b2e6c06401d47d1742b7f2346cea16221a5856683799b27b46cca7d81bc58cf6d5aba6c346846cdae0eb7bcd983

  • SSDEEP

    196608:i9ZduEt13XRQHpZQFegAVPTNMuMCvuugxdO:kuORRapZQ9AZ+unvB8dO

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 35 IoCs

    Detects file using ACProtect software.

  • UPX packed file 43 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 52 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • af4642c5401c868c587a0aad5837fbe4_JaffaCakes118
    .rar
  • ClamWinPortable/App/AppInfo/appicon.ico
  • ClamWinPortable/App/AppInfo/appicon_128.png
    .png
  • ClamWinPortable/App/AppInfo/appicon_16.png
    .png
  • ClamWinPortable/App/AppInfo/appicon_32.png
    .png
  • ClamWinPortable/App/AppInfo/appinfo.ini
  • ClamWinPortable/App/DefaultData/settings/ClamWin.conf
  • ClamWinPortable/App/clamwin/bin/ClamTray.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ClamWinPortable/App/clamwin/bin/ClamWin.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ClamWinPortable/App/clamwin/bin/Microsoft.VC80.CRT.manifest
    .xml
  • ClamWinPortable/App/clamwin/bin/WClose.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ClamWinPortable/App/clamwin/bin/clamscan.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ClamWinPortable/App/clamwin/bin/freshclam.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ClamWinPortable/App/clamwin/bin/img/ClamAV.png
    .png
  • ClamWinPortable/App/clamwin/bin/img/Control.png
    .png
  • ClamWinPortable/App/clamwin/bin/img/FrameIcon.ico
  • ClamWinPortable/App/clamwin/bin/img/ListScan.png
    .png
  • ClamWinPortable/App/clamwin/bin/img/Scan.png
    .png
  • ClamWinPortable/App/clamwin/bin/img/ScanMem.png
    .png
  • ClamWinPortable/App/clamwin/bin/img/Splash.bmp
  • ClamWinPortable/App/clamwin/bin/img/Title.png
    .png
  • ClamWinPortable/App/clamwin/bin/img/TrayIcon.ico
  • ClamWinPortable/App/clamwin/bin/img/World.png
    .png
  • ClamWinPortable/App/clamwin/bin/img/clamwin.png
    .png
  • ClamWinPortable/App/clamwin/bin/img/netfarm.png
    .png
  • ClamWinPortable/App/clamwin/bin/libclamav.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ClamWinPortable/App/clamwin/bin/libclamav_llvm.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ClamWinPortable/App/clamwin/bin/libclamunrar.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ClamWinPortable/App/clamwin/bin/libclamunrar_iface.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/bin/manual.chm
    .chm
  • ClamWinPortable/App/clamwin/bin/manual_en.pdf
    .pdf
  • ClamWinPortable/App/clamwin/bin/msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    83e6ecedcb8a69cca8d85e1481140fa0


    Headers

    Imports

    Exports

    Sections

  • ClamWinPortable/App/clamwin/bin/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ClamWinPortable/App/clamwin/bin/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ClamWinPortable/App/clamwin/bin/pyc.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/bin/python23.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/bin/sigtool.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ClamWinPortable/App/clamwin/bin/w9xpopen.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ClamWinPortable/App/clamwin/lib/_bsddb.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/_ctypes.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/_socket.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/_sre.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/_ssl.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/_winreg.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/clamwin.zip
    .zip
  • ClamWinPortable/App/clamwin/lib/datetime.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/exchange.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/exchdapi.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/gizmosc.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/htmlc.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/mapi.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/mxDateTime.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/pythoncom23.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/pywintypes23.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/shell.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/unicodedata.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/w9xpopen.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ClamWinPortable/App/clamwin/lib/win32api.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/win32clipboard.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/win32event.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/win32file.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/win32gui.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/win32pipe.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/win32process.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/win32security.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/win32trace.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/wxc.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/wxmsw24h.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/App/clamwin/lib/zlib.pyd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ClamWinPortable/ClamWinPortable.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • ClamWinPortable/Other/Help/images/donation_button.png
    .png
  • ClamWinPortable/Other/Help/images/favicon.ico
  • ClamWinPortable/Other/Help/images/help_background_footer.png
    .png
  • ClamWinPortable/Other/Help/images/help_background_header.png
    .png
  • ClamWinPortable/Other/Help/images/help_logo_top.png
    .png
  • ClamWinPortable/Other/Source/AppSource.txt
  • ClamWinPortable/Other/Source/CheckForPlatformSplashDisable.nsh
  • ClamWinPortable/Other/Source/ClamWinPortable.ini
  • ClamWinPortable/Other/Source/ClamWinPortable.jpg
    .jpg
  • ClamWinPortable/Other/Source/ClamWinPortable.nsi
  • ClamWinPortable/Other/Source/Languages/Afrikaans.nsh
  • ClamWinPortable/Other/Source/Languages/Albanian.nsh
  • ClamWinPortable/Other/Source/Languages/Arabic.nsh
  • ClamWinPortable/Other/Source/Languages/Basque.nsh
  • ClamWinPortable/Other/Source/Languages/Belarusian.nsh
  • ClamWinPortable/Other/Source/Languages/Bosnian.nsh
  • ClamWinPortable/Other/Source/Languages/Breton.nsh
  • ClamWinPortable/Other/Source/Languages/Bulgarian.nsh
  • ClamWinPortable/Other/Source/Languages/Catalan.nsh
  • ClamWinPortable/Other/Source/Languages/Cibemba.nsh
  • ClamWinPortable/Other/Source/Languages/Croatian.nsh
  • ClamWinPortable/Other/Source/Languages/Czech.nsh
  • ClamWinPortable/Other/Source/Languages/Danish.nsh
  • ClamWinPortable/Other/Source/Languages/Dutch.nsh
  • ClamWinPortable/Other/Source/Languages/Efik.nsh
  • ClamWinPortable/Other/Source/Languages/English.nsh
  • ClamWinPortable/Other/Source/Languages/Esperanto.nsh
  • ClamWinPortable/Other/Source/Languages/Estonian.nsh
  • ClamWinPortable/Other/Source/Languages/Farsi.nsh
  • ClamWinPortable/Other/Source/Languages/Finnish.nsh
  • ClamWinPortable/Other/Source/Languages/French.nsh
  • ClamWinPortable/Other/Source/Languages/Galician.nsh
  • ClamWinPortable/Other/Source/Languages/Georgian.nsh
  • ClamWinPortable/Other/Source/Languages/German.nsh
  • ClamWinPortable/Other/Source/Languages/Greek.nsh
  • ClamWinPortable/Other/Source/Languages/Hebrew.nsh
  • ClamWinPortable/Other/Source/Languages/Hungarian.nsh
  • ClamWinPortable/Other/Source/Languages/Icelandic.nsh
  • ClamWinPortable/Other/Source/Languages/Igbo.nsh
  • ClamWinPortable/Other/Source/Languages/Indonesian.nsh
  • ClamWinPortable/Other/Source/Languages/Irish.nsh
  • ClamWinPortable/Other/Source/Languages/Italian.nsh
  • ClamWinPortable/Other/Source/Languages/Japanese.nsh
  • ClamWinPortable/Other/Source/Languages/Khmer.nsh
  • ClamWinPortable/Other/Source/Languages/Korean.nsh
  • ClamWinPortable/Other/Source/Languages/Kurdish.nsh
  • ClamWinPortable/Other/Source/Languages/Latvian.nsh
  • ClamWinPortable/Other/Source/Languages/Lithuanian.nsh
  • ClamWinPortable/Other/Source/Languages/Luxembourgish.nsh
  • ClamWinPortable/Other/Source/Languages/Macedonian.nsh
  • ClamWinPortable/Other/Source/Languages/Malagasy.nsh
  • ClamWinPortable/Other/Source/Languages/Malay.nsh
  • ClamWinPortable/Other/Source/Languages/Mongolian.nsh
  • ClamWinPortable/Other/Source/Languages/Norwegian.nsh
  • ClamWinPortable/Other/Source/Languages/NorwegianNynorsk.nsh
  • ClamWinPortable/Other/Source/Languages/Pashto.nsh
  • ClamWinPortable/Other/Source/Languages/Polish.nsh
  • ClamWinPortable/Other/Source/Languages/Portuguese.nsh
  • ClamWinPortable/Other/Source/Languages/PortugueseBR.nsh
  • ClamWinPortable/Other/Source/Languages/Romanian.nsh
  • ClamWinPortable/Other/Source/Languages/Russian.nsh
  • ClamWinPortable/Other/Source/Languages/Serbian.nsh
  • ClamWinPortable/Other/Source/Languages/SerbianLatin.nsh
  • ClamWinPortable/Other/Source/Languages/SimpChinese.nsh
  • ClamWinPortable/Other/Source/Languages/Slovak.nsh
  • ClamWinPortable/Other/Source/Languages/Slovenian.nsh
  • ClamWinPortable/Other/Source/Languages/Spanish.nsh
  • ClamWinPortable/Other/Source/Languages/SpanishInternational.nsh
  • ClamWinPortable/Other/Source/Languages/Swahili.nsh
  • ClamWinPortable/Other/Source/Languages/Swedish.nsh
  • ClamWinPortable/Other/Source/Languages/Thai.nsh
  • ClamWinPortable/Other/Source/Languages/TradChinese.nsh
  • ClamWinPortable/Other/Source/Languages/Turkish.nsh
  • ClamWinPortable/Other/Source/Languages/Ukrainian.nsh
  • ClamWinPortable/Other/Source/Languages/Uzbek.nsh
  • ClamWinPortable/Other/Source/Languages/Valencian.nsh
  • ClamWinPortable/Other/Source/Languages/Vietnamese.nsh
  • ClamWinPortable/Other/Source/Languages/Welsh.nsh
  • ClamWinPortable/Other/Source/Languages/Yoruba.nsh
  • ClamWinPortable/Other/Source/License.txt
  • ClamWinPortable/Other/Source/PortableApps.comLauncherLANG_ENGLISH.nsh
  • ClamWinPortable/Other/Source/ReadINIStrWithDefault.nsh
  • ClamWinPortable/Other/Source/Readme.txt
  • ClamWinPortable/Other/Source/ReplaceInFileWithTextReplace.nsh
  • ClamWinPortable/help.html
    .html