General

  • Target

    c836ac86ddec8a4966fef9cb25a2af1f_JaffaCakes118

  • Size

    20.6MB

  • MD5

    c836ac86ddec8a4966fef9cb25a2af1f

  • SHA1

    7eca6677dda0305dfbc60e0c4edc5b1f821d87ef

  • SHA256

    ef20b38b213fb69d35a93a27eca177644f3cb8efcd9481acb10581a1872fe775

  • SHA512

    82c33b05ac2fd89a93fffbfb18b841e3aff456ca135d8b7282f577947b7d5e41056f6ad8f318c1b58015ad1ddd5748ec964c68eded665d735f2f5572e9eb848b

  • SSDEEP

    393216:9qtukf3GC7j8GYgvluj4W3kxRcUNK5hntyfgTqao15Ef4zkI3UmZPteKuzcsT7:9qtuk+C8X0Mj47xCUNentyfaqtsrI3FO

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 35 IoCs

    Checks for missing Authenticode signature.

Files

  • c836ac86ddec8a4966fef9cb25a2af1f_JaffaCakes118
    .zip
  • XnConvert/AddOn/Masks/Camera01.gif
    .gif
  • XnConvert/AddOn/Masks/Camera02.gif
  • XnConvert/AddOn/Masks/Camera03.gif
  • XnConvert/AddOn/Masks/Camera04.gif
  • XnConvert/AddOn/Masks/Camera05.gif
  • XnConvert/AddOn/Masks/Camera06.gif
  • XnConvert/AddOn/Masks/Camera07.gif
  • XnConvert/AddOn/Masks/Camera08.gif
  • XnConvert/AddOn/Masks/Camera09.gif
  • XnConvert/AddOn/Masks/Camera10.gif
  • XnConvert/AddOn/Masks/PF-Brush.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Bubbles.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Camera.jpg
    .jpg
  • XnConvert/AddOn/Masks/PF-Chaos.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Diffuse.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Dilution.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Ellipse.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Flame.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Fog.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Ink.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Keyhole.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Lines.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Motion.jpg
    .jpg
  • XnConvert/AddOn/Masks/PF-Pastels.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Radial.gif
  • XnConvert/AddOn/Masks/PF-Slide.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Snowflake.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Sponge.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Spray.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Star.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Sun.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Torn.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Twirl.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Watercolor.gif
    .gif
  • XnConvert/AddOn/Masks/PF-Wet.gif
    .gif
  • XnConvert/AddOn/Masks/Photo01.jpg
    .jpg
  • XnConvert/AddOn/Masks/Photo02.jpg
    .jpg
  • XnConvert/AddOn/Masks/Photo03.jpg
    .jpg
  • XnConvert/AddOn/Thumbs/org.png
    .png
  • XnConvert/Qt5CoreXn.dll
    .dll windows:6 windows x64 arch:x64

    85c4cb9b485330815ea83ae129f7093f


    Headers

    Imports

    Exports

    Sections

  • XnConvert/Qt5GuiXn.dll
    .dll windows:6 windows x64 arch:x64

    12593db405f75b7ff14daa057dacdf35


    Headers

    Imports

    Exports

    Sections

  • XnConvert/Qt5NetworkXn.dll
    .dll windows:6 windows x64 arch:x64

    979deb27c8f1c8684165b6608729c6a3


    Headers

    Imports

    Exports

    Sections

  • XnConvert/Qt5SvgXn.dll
    .dll windows:6 windows x64 arch:x64

    9994506d89efed27813363b2742a7452


    Headers

    Imports

    Exports

    Sections

  • XnConvert/Qt5WidgetsXn.dll
    .dll windows:6 windows x64 arch:x64

    19b7d02b4bf7f9af79af170ca4f75ef0


    Headers

    Imports

    Exports

    Sections

  • XnConvert/Qt5WinExtrasXn.dll
    .dll windows:6 windows x64 arch:x64

    d32fdbca9e9026ffd1d93d0f4e2e7632


    Headers

    Imports

    Exports

    Sections

  • XnConvert/Qt5XmlXn.dll
    .dll windows:6 windows x64 arch:x64

    f9c0c49444f9c4162bf1ef4767e74113


    Headers

    Imports

    Exports

    Sections

  • XnConvert/Visual C++ Redistributable Packages.website
    .url
  • XnConvert/XMPCore.dll
    .dll windows:6 windows x64 arch:x64

    fc295b1110eb533eb4e1f06a9de75b21


    Headers

    Imports

    Exports

    Sections

  • XnConvert/XMPFiles.dll
    .dll windows:6 windows x64 arch:x64

    ff3d99205ee79f985c2492981f992589


    Headers

    Imports

    Exports

    Sections

  • XnConvert/XnConvert.URL
  • XnConvert/language/qt_ar.qm
  • XnConvert/language/qt_ca.qm
  • XnConvert/language/qt_cn.qm
  • XnConvert/language/qt_cs.qm
  • XnConvert/language/qt_da.qm
  • XnConvert/language/qt_de.qm
  • XnConvert/language/qt_es.qm
  • XnConvert/language/qt_fi.qm
  • XnConvert/language/qt_fr.qm
  • XnConvert/language/qt_hu.qm
  • XnConvert/language/qt_it.qm
  • XnConvert/language/qt_ja.qm
  • XnConvert/language/qt_ko.qm
  • XnConvert/language/qt_lv.qm
  • XnConvert/language/qt_pl.qm
  • XnConvert/language/qt_pt.qm
  • XnConvert/language/qt_ru.qm
  • XnConvert/language/qt_sk.qm
  • XnConvert/language/qt_sv.qm
  • XnConvert/language/qt_tw.qm
  • XnConvert/language/qt_uk.qm
  • XnConvert/language/qt_zh_CN.qm
  • XnConvert/language/qt_zh_TW.qm
  • XnConvert/language/xnview_ca.qm
  • XnConvert/language/xnview_cs.qm
  • XnConvert/language/xnview_de.qm
  • XnConvert/language/xnview_es.qm
  • XnConvert/language/xnview_et.qm
  • XnConvert/language/xnview_fr.qm
  • XnConvert/language/xnview_hu.qm
  • XnConvert/language/xnview_hy.qm
  • XnConvert/language/xnview_il.qm
  • XnConvert/language/xnview_it.qm
  • XnConvert/language/xnview_ja.qm
  • XnConvert/language/xnview_ko.qm
  • XnConvert/language/xnview_nb.qm
  • XnConvert/language/xnview_nl.qm
  • XnConvert/language/xnview_pl.qm
  • XnConvert/language/xnview_pt.qm
  • XnConvert/language/xnview_pt_BR.qm
  • XnConvert/language/xnview_ru.qm
  • XnConvert/language/xnview_sk.qm
  • XnConvert/language/xnview_sv.qm
  • XnConvert/language/xnview_tr.qm
  • XnConvert/language/xnview_tw.qm
  • XnConvert/language/xnview_uk.qm
  • XnConvert/language/xnview_zh.qm
  • XnConvert/libeay32.dll
    .dll windows:6 windows x64 arch:x64

    9ef96b19a64e5e1f127e5881675a2f1a


    Headers

    Imports

    Exports

    Sections

  • XnConvert/license.txt
  • XnConvert/msvcp120.dll
    .dll windows:6 windows x64 arch:x64

    d0a59246eab41d54812cd63c2326e1f1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XnConvert/msvcr120.dll
    .dll windows:6 windows x64 arch:x64

    8f18e22935ef8b336e246ee763fbec97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/OpenEXR.dll
    .dll windows:6 windows x64 arch:x64

    4c93a4f1ddb76df20a5cd265f2838287


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/bearer/qgenericbearer.dll
    .dll windows:6 windows x64 arch:x64

    783a93d75fc8152f593dd0cfeb142398


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/bearer/qnativewifibearer.dll
    .dll windows:6 windows x64 arch:x64

    77d60d19ac9096e9df8792cd714dce92


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/bpgdec.exe
    .exe windows:4 windows x64 arch:x64

    4bf635feee3e378d5c090ee0564f83aa


    Headers

    Imports

    Sections

  • XnConvert/plugins/clip.dll
    .dll windows:6 windows x64 arch:x64

    14a5a6c2b056214f37a7a4a97924e169


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/iconengines/qsvgicon.dll
    .dll windows:6 windows x64 arch:x64

    2c2d076322faa9fb5172d9d0a4907066


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/imageformats/qgif.dll
    .dll windows:6 windows x64 arch:x64

    b0dc84ed222e2bb945c983bf6e5e7d5c


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/imageformats/qicns.dll
    .dll windows:6 windows x64 arch:x64

    7e76e65ab66e48003bdca8f17faa8153


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/imageformats/qico.dll
    .dll windows:6 windows x64 arch:x64

    68eadfa3c771359cc07e572288f98604


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/imageformats/qjpeg.dll
    .dll windows:6 windows x64 arch:x64

    37e34023828e4cd718c9bbd5a3a527b5


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/imageformats/qsvg.dll
    .dll windows:6 windows x64 arch:x64

    e56bec2a6bab820af27c387064e8c8af


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/imageformats/qtga.dll
    .dll windows:6 windows x64 arch:x64

    d89091b2ff2a78eec7ddaf721ae98611


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/imageformats/qtiff.dll
    .dll windows:6 windows x64 arch:x64

    c0f06b721b1bbd7cadfb85bbce7e910e


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/imageformats/qwbmp.dll
    .dll windows:6 windows x64 arch:x64

    92a21ad7e1c4fd3bc3d125c98224a036


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/imageformats/qwebp.dll
    .dll windows:6 windows x64 arch:x64

    62b29550990cb8fa0bafa56a07458184


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/libflif.dll
    .dll windows:4 windows x64 arch:x64

    67284beddad63d1dca1d57a0405405bf


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/libjpeg-62.dll
    .dll windows:4 windows x86 arch:x86

    1b501151814ba05caff8c5416eebd294


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/libpng16-16.dll
    .dll windows:4 windows x64 arch:x64

    ea6bc91e764501abaf1bb76f0e2f4ef0


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/openjp2.dll
    .dll windows:5 windows x64 arch:x64

    12733b23d7646d1cdc277ae27b15eac3


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    223a6145d2f494c7c474f41a4fa69679


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/rwz_sdk.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • XnConvert/plugins/webp.dll
    .dll windows:6 windows x64 arch:x64

    9216c2eb2d5b3f26adfec72ae5ac47c4


    Headers

    Imports

    Exports

    Sections

  • XnConvert/plugins/zlib1.dll
    .dll windows:4 windows x64 arch:x64

    4e20c36aa130b377e93f71427251188c


    Headers

    Imports

    Exports

    Sections

  • XnConvert/qt.conf
  • XnConvert/ssleay32.dll
    .dll windows:6 windows x64 arch:x64

    b0d6be57bfb41be00cf013f2df12b2d2


    Headers

    Imports

    Exports

    Sections

  • XnConvert/vccorlib120.dll
    .dll windows:6 windows x64 arch:x64

    85727cb86aafd871280ffe38ff204b60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XnConvert/vcomp120.dll
    .dll windows:6 windows x64 arch:x64

    17d68c59fb767d5427b29b2520ee21c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XnConvert/xnconvert.exe
    .exe windows:6 windows x64 arch:x64

    3dfd272a18a100eb1202179fb7abda12


    Code Sign

    Headers

    Imports

    Sections

  • XnConvert/xnview.exe.manifest
    .xml