General

  • Target

    bc669433a58e9fb99d6830d1f99af072_JaffaCakes118

  • Size

    251KB

  • MD5

    bc669433a58e9fb99d6830d1f99af072

  • SHA1

    13c9896fc841b1636a106f26195121793644e758

  • SHA256

    61f46c164a8b149c26d7ab905d3c4893b647d8d17073cfd406ece493c7daa32c

  • SHA512

    6d2efcacec59d713edcd72468b19d9d4378676f7b6995be69c812c8c666c4c7e246bdf55117c09eae245d166ff6b3ead52dedf94e212d8af152afc0321890ac7

  • SSDEEP

    6144:gzr3t8YWjQEk+cJfjTothE0qawdXopGCYxaPFbq9GdxGa:IGGEk+cJkqrd0GV4PFm8XGa

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • bc669433a58e9fb99d6830d1f99af072_JaffaCakes118
    .rar
  • 62830930/Dll/ICQMenace.cfg
  • 62830930/Dll/ICQMenace.dof
  • 62830930/Dll/ICQMenace.dpr
  • 62830930/Dll/ICQMenace.res
  • 62830930/Dll/Main.pas
    .js
  • 62830930/Dll/xBase.pas
  • 62830930/Help/D6OnHelpFix.pas
  • 62830930/Help/D6OnHelpFix.txt
  • 62830930/Help/hh.pas
  • 62830930/Help/hh_doc.txt
  • 62830930/Help/hh_funcs.pas
    .js
  • 62830930/ICQMenace/About.dfm
  • 62830930/ICQMenace/About.pas
  • 62830930/ICQMenace/ICQMenace.cfg
  • 62830930/ICQMenace/ICQMenace.dof
  • 62830930/ICQMenace/ICQMenace.dpr
  • 62830930/ICQMenace/ICQMenace.res
  • 62830930/ICQMenace/Main.dfm
  • 62830930/ICQMenace/Main.pas
    .js
  • 62830930/ICQMenace/Options.dfm
  • 62830930/ICQMenace/Options.pas
  • 62830930/ICQMenace/PktHandlerLocal.pas
    .js
  • 62830930/ICQMenace/Resources.res
  • 62830930/ICQMenace/Resources/Data/about.txt
  • 62830930/ICQMenace/Resources/Data/list.bmp
  • 62830930/ICQMenace/Resources/Data/tree.bmp
  • 62830930/ICQMenace/Resources/Resources.rc
  • 62830930/ICQMenace/Resources/brcc32.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • 62830930/ICQMenace/Resources/compile_resources.bat
  • 62830930/ICQMenace/Resources/cw3220mt.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:1 windows x86 arch:x86


    Headers

    Sections

  • 62830930/ICQMenace/Search.dfm
  • 62830930/ICQMenace/Search.pas
  • 62830930/ICQMenace/xBase.pas
    .js
  • 62830930/PktViewer/PktExporter.pas
  • 62830930/PktViewer/PktViewer.pas
    .js
  • 62830930/ScriptCompiler/Compile.cfg
  • 62830930/ScriptCompiler/Compile.dof
  • 62830930/ScriptCompiler/Compile.dpr
    .js
  • 62830930/Shared/AppLink/PktHandler.pas
    .js
  • 62830930/Shared/AppLink/PktPipes.pas
    .js
  • 62830930/Shared/AppLink/PktUtils.pas
    .js
  • 62830930/Shared/madCodeHookLib.pas
  • 62830930/clean_up.bat
  • 62830930/ifps3/ifpicall.pas
    .js
  • 62830930/ifps3/ifpidelphi.pas
    .js
  • 62830930/ifps3/ifpidelphiruntime.pas
  • 62830930/ifps3/ifps3.pas
    .js
  • 62830930/ifps3/ifps3_def.inc
  • 62830930/ifps3/ifps3common.pas
  • 62830930/ifps3/ifps3lib_std.pas
  • 62830930/ifps3/ifps3lib_stdr.pas
  • 62830930/ifps3/ifps3utl.pas
  • 62830930/ifps3/ifpscomp.pas
    .js
  • 62830930/下载说明.htm
    .html .js polyglot