Overview

overview

7

Static

static

7

b5bb9c9396...18.exe

windows7-x64

3

b5bb9c9396...18.exe

windows10-2004-x64

3

$PLUGINSDI...64.dll

windows7-x64

3

$PLUGINSDI...64.dll

windows10-2004-x64

3

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

CoolAlbum.exe

windows7-x64

7

CoolAlbum.exe

windows10-2004-x64

7

DIBManager.dll

windows7-x64

3

DIBManager.dll

windows10-2004-x64

3

HelpFunction.dll

windows7-x64

3

HelpFunction.dll

windows10-2004-x64

3

LoadBmp.dll

windows7-x64

3

LoadBmp.dll

windows10-2004-x64

3

LoadGif.dll

windows7-x64

3

LoadGif.dll

windows10-2004-x64

3

LoadJp2.dll

windows7-x64

3

LoadJp2.dll

windows10-2004-x64

3

LoadJpg.dll

windows7-x64

3

LoadJpg.dll

windows10-2004-x64

3

LoadPcx.dll

windows7-x64

3

LoadPcx.dll

windows10-2004-x64

3

LoadPng.dll

windows7-x64

3

LoadPng.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    b5bb9c9396f28e7e3d716813167781cf_JaffaCakes118

  • Size

    774KB

  • MD5

    b5bb9c9396f28e7e3d716813167781cf

  • SHA1

    d8f7d3ba354e6016af13f261f1c6f3c8fce1f17e

  • SHA256

    96b8aa4cf10ef47022c87a04ed03be22955beafdbe2d7f129b816810fd6cd88e

  • SHA512

    86a0c77ca09b0149c1aa897bcf7f837ee82ab183655f3d0e82f44c5af26277a5928e0d662a14323334bd8f3e33ab9faeb29864ecfcb81774a4058c1ee3176a00

  • SSDEEP

    24576:RYeV5pIL+c4ixOIB/dLwUZ9FbsO7n1xaz:RZVv0+cLOINL9FbH7n1xaz

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • b5bb9c9396f28e7e3d716813167781cf_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    1ba6926a1ee4e4cda118768081f528d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/blowfish.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • CoolAlbum.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • DIBManager.dll
    .dll windows:4 windows x86 arch:x86

    8a98178bd37a00975307c0b2998b542a


    Headers

    Imports

    Exports

    Sections

  • HelpFunction.dll
    .dll windows:4 windows x86 arch:x86

    28f25be247341da23001a0bbea13f767


    Headers

    Imports

    Exports

    Sections

  • LoadBmp.dll
    .dll windows:4 windows x86 arch:x86

    378eb3b7a0d9b15610b858220634206f


    Headers

    Imports

    Exports

    Sections

  • LoadGif.dll
    .dll windows:4 windows x86 arch:x86

    0514da8b246e9079a4de5ce47577aa68


    Headers

    Imports

    Exports

    Sections

  • LoadJp2.dll
    .dll windows:4 windows x86 arch:x86

    99a42fd867884a624da02078e534a3b5


    Headers

    Imports

    Exports

    Sections

  • LoadJpg.dll
    .dll windows:4 windows x86 arch:x86

    fe0d6105f018fd8abba25bfd696f6e9b


    Headers

    Imports

    Exports

    Sections

  • LoadPcx.dll
    .dll windows:4 windows x86 arch:x86

    1f99deb794f833848f0129b4f32ebb38


    Headers

    Imports

    Exports

    Sections

  • LoadPng.dll
    .dll windows:4 windows x86 arch:x86

    23fdc51297c8ead8b0aaf8505c1378fc


    Headers

    Imports

    Exports

    Sections

  • LoadTga.dll
    .dll windows:4 windows x86 arch:x86

    efab86c573beafb0c9525ba3cd8f12d5


    Headers

    Imports

    Exports

    Sections

  • LoadTif.dll
    .dll windows:4 windows x86 arch:x86

    cd3c081f8ef27cc4e920189fa88b3810


    Headers

    Imports

    Exports

    Sections

  • OneTip_ch.txt
  • PackageData.dll
    .dll windows:4 windows x86 arch:x86

    12baa5459dd6bc57445c6925944f9bb4


    Headers

    Imports

    Exports

    Sections

  • PlayMusic.dll
    .dll windows:4 windows x86 arch:x86

    b00c144783c16526a7a0331156770df6


    Headers

    Imports

    Exports

    Sections

  • SendMail.dll
    .dll windows:4 windows x86 arch:x86

    f63d8da65211f893937b231b89b1070a


    Headers

    Imports

    Exports

    Sections

  • Style.dll
    .dll windows:4 windows x86 arch:x86

    db3fa99c38eee6709847838003a70d5e


    Headers

    Imports

    Exports

    Sections

  • cover/coverb1.jpg
    .jpg
  • show.data
  • splash_ch.jpg
    .jpg