General

  • Target

    c25974223c254558666654058a9ba3bb_JaffaCakes118

  • Size

    2.4MB

  • MD5

    c25974223c254558666654058a9ba3bb

  • SHA1

    02d28c70d90f899833d8cd91eb8816354b6e9f95

  • SHA256

    81e8f64c09d5935c1f76518e329dee7861c953a896a6ac05a493bbf0da6d2ab5

  • SHA512

    c1b350c61a85af63ced6f41d84bd83355b981f05d448e817a7221fa38943e74b4892dec44523c05454b14b6050ac06a00df2e1afe46236032ad43eef3a0da990

  • SSDEEP

    49152:1Mw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFOFvtnH8gv+IfWiyTRMwB9s:6kil7T6kxxArgBdFRYII+pL6

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • c25974223c254558666654058a9ba3bb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsWebJPDesk.dll
    .dll windows:5 windows x86 arch:x86

    9c769c4e96ebd61fceb06adb39633a3e


    Headers

    Imports

    Exports

    Sections

  • Default.png.tmp
    .png
  • PicLib/App/Thumbs.db
  • PicLib/App/feixin.png
    .png
  • PicLib/FileTypes/PDF.png
    .png
  • PicLib/FileTypes/Thumbs.db
  • PicLib/FileTypes/doc.png
    .png
  • PicLib/FileTypes/eml.png
    .png
  • PicLib/FileTypes/ppt.png
    .png
  • PicLib/FileTypes/psd.png
    .png
  • PicLib/FileTypes/rar.png
    .png
  • PicLib/FileTypes/vsd.png
    .png
  • PicLib/FileTypes/xls.png
    .png
  • PicLib/MiscIcons/BitComet.png
    .png
  • PicLib/MiscIcons/Google Talk.png
    .png
  • PicLib/MiscIcons/Nero.png
    .png
  • PicLib/MiscIcons/Office - OneNote.png
    .png
  • PicLib/MiscIcons/Office - Publisher.png
    .png
  • PicLib/MiscIcons/Opera.png
    .png
  • PicLib/MiscIcons/Quicktime.png
    .png
  • PicLib/MiscIcons/Skype.png
    .png
  • PicLib/MiscIcons/Thumbs.db
  • PicLib/MiscIcons/WoW.png
    .png
  • PicLib/MiscIcons/iTunes.png
    .png
  • PicLib/MiscIcons/.png
    .png
  • PicLib/MiscIcons/.png
    .png
  • PicLib/MiscIcons/.png
    .png
  • PicLib/MiscIcons/.png
    .png
  • PicLib/MiscIcons/֮.png
    .png
  • jpdesk.exe.tmp
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • poof.png.tmp
    .png