General

  • Target

    b26d09ef7b435b1ab8d1d092c7c5d28f_JaffaCakes118

  • Size

    1.1MB

  • MD5

    b26d09ef7b435b1ab8d1d092c7c5d28f

  • SHA1

    287b227fc468b62bf47cbfc95e07e9c5b33c8026

  • SHA256

    ba193a687350767c11cb2a8afdfb65735ba92fe15f78243e7644f50a71d0c66f

  • SHA512

    b73ba56a53ab4765ae6b6b90a6f6d3f9544a44d1d11b7e2fa18a2d3eb951bc2bc64f64a27f92f6882644c8d16e2224470173321e74d33fc4fe5b2195ecca1fab

  • SSDEEP

    24576:ZzOwtr1f6orDe9iamxHovsmcB5oV/nwKw/lErmN0vlSPuOjiYH16XOLi4t7qy:sOx6IDe9ipH/B5odwllYTtSVmYViKWy

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • b26d09ef7b435b1ab8d1d092c7c5d28f_JaffaCakes118
    .rar
  • yIcePoint/Protect.dll
    .dll windows:4 windows x86 arch:x86

    00a0f7a6ca7396bfc24edbf56828b816


    Headers

    Imports

    Exports

    Sections

  • yIcePoint/Safe.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • yIcePoint/mscomctl.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    ce21923007044b1701a0b2dc4ac9396b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • yIcePoint/msvbvm60.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5d13f1b45437e48acf7175e1471cd9aa


    Headers

    Imports

    Exports

    Sections

  • yIcePoint/yIcePoint.EXE
    .exe windows:4 windows x86 arch:x86

    af523509b97107636be130c51442e013


    Headers

    Imports

    Sections

  • yIcePoint/新云软件.url
    .url
  • yIcePoint/说明.txt