Overview

overview

7

Static

static

7

c0f548be19...18.exe

windows7-x64

7

c0f548be19...18.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ps.dll

windows7-x64

3

$PLUGINSDI...ps.dll

windows10-2004-x64

3

$SYSDIR/avisynth.dll

windows7-x64

7

$SYSDIR/avisynth.dll

windows10-2004-x64

7

$SYSDIR/devil.dll

windows7-x64

3

$SYSDIR/devil.dll

windows10-2004-x64

3

$SYSDIR/li...-0.dll

windows7-x64

3

$SYSDIR/li...-0.dll

windows10-2004-x64

3

$SYSDIR/pt...C2.dll

windows7-x64

3

$SYSDIR/pt...C2.dll

windows10-2004-x64

3

$SYSDIR/xvidcore.dll

windows7-x64

3

$SYSDIR/xvidcore.dll

windows10-2004-x64

3

Freez Flv ...er.exe

windows7-x64

1

Freez Flv ...er.exe

windows10-2004-x64

3

NCMedia.dll

windows7-x64

1

NCMedia.dll

windows10-2004-x64

1

flvvideo.dll

windows7-x64

1

flvvideo.dll

windows10-2004-x64

1

soft2cn...��.exe

windows7-x64

3

soft2cn...��.exe

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c0f548be191862cba887054db7ca3d40_JaffaCakes118

  • Size

    3.9MB

  • MD5

    c0f548be191862cba887054db7ca3d40

  • SHA1

    93a88a659c5f017fbefc61ddd0bc66bc53a8623f

  • SHA256

    1cb5f919b512324fa2f03b1fa841fd1fbba70a03bc903108d639bb2ce3bb5983

  • SHA512

    ee49d6b4b914eedf3e272c6831e8b69b45ce1b986c1975e202d8408f7b61bc3a56d1f2c08281cc8548038e741c01e7b4d10304efec7623049e7975342e7bb44b

  • SSDEEP

    98304:PX74rdUjIfWfSrTZWacMBYlCEHyqXQk/KdBXXBKEPVSQBUcJOKy/n1E:fkrdUjtudcjxXQ1tXHU4UWyfm

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • c0f548be191862cba887054db7ca3d40_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    711c893e4d8189fd14b6563a4e35e663


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    946eb0a1e85c9ade4acaf634eb5a64f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ToolTips.dll
    .dll windows:4 windows x86 arch:x86

    04338c58e26f4ac6ae89608ac6276429


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/avisynth.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $SYSDIR/devil.dll
    .dll windows:4 windows x86 arch:x86

    539dc2de9957ed66b1a3e23a9e595fd9


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/libmp3lame-0.dll
    .dll windows:4 windows x86 arch:x86

    9ca2ee4e24dda303c73751838f569786


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/pthreadGC2.dll
    .dll windows:4 windows x86 arch:x86

    4ed4b97c004af0f3c95aeb69c247d60b


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/xvidcore.dll
    .dll windows:4 windows x86 arch:x86

    bf634c8fcfe369e96e3d54d8dfe57275


    Headers

    Imports

    Exports

    Sections

  • Freez Flv to Video Converter.JPG
    .jpg
  • Freez Flv to Video Converter.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NCMedia.dll
  • flvvideo.dll
  • soft2cncom˵.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • ˵.txt