General

  • Target

    c8c61034e3557861f8d89002a83b905b_JaffaCakes118

  • Size

    6.4MB

  • MD5

    c8c61034e3557861f8d89002a83b905b

  • SHA1

    ce3b7129475c0bc127581608a2306c7af126ca15

  • SHA256

    d6073b651c6ffe84d22e5424bfdb79097af730cc89358f3a0f89eb1b22c414a7

  • SHA512

    b85537bcb778ef8ae91089f0fd4a0e1832b35b24887499ad7f3fae14f993e6c432972c817e8b173f157dc1be9d639da54be10fc4587c73ed297824e5609d8419

  • SSDEEP

    196608:tTCM9Lc3/t82F/pqhlYgcF1kI4sx/ChYX:tTG3l82nC2gcFcsxUYX

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 39 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • c8c61034e3557861f8d89002a83b905b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    28d94e5199b88ad374b3cb2118e31a66


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsisdll.dll
    .dll windows:4 windows x86 arch:x86

    7a1b2222bcad8848ee1e1190f24f1473


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/serial.ini
  • 123key.exe
    .exe windows:4 windows x86 arch:x86

    a3eecdd6d0d99f707a43cc473fd4d066


    Headers

    Imports

    Sections

  • acbtkey.exe
    .exe windows:4 windows x86 arch:x86

    eb3b216017233a42141b90480e041009


    Headers

    Imports

    Sections

  • actkey.exe
    .exe windows:4 windows x86 arch:x86

    2810bdd61d6774a83637b1c682610e26


    Headers

    Imports

    Sections

  • ariskkey.dll
    .dll windows:4 windows x86 arch:x86

    b52d799c44c87a199ae8aec934147fc4


    Headers

    Imports

    Exports

    Sections

  • ariskkey.exe
    .exe windows:4 windows x86 arch:x86

    924f28d88acd59285a7261a06eb006b2


    Headers

    Imports

    Sections

  • bckey.exe
    .exe windows:4 windows x86 arch:x86

    b2fea1bc34152129ab34a45fd1d40dff


    Headers

    Imports

    Sections

  • bckupkey.exe
    .exe windows:4 windows x86 arch:x86

    b2a604b00aee433a0d1604f0daf2bb90


    Headers

    Imports

    Sections

  • dict.txt
  • efsdll.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • efskey.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • fmkey.exe
    .exe windows:4 windows x86 arch:x86

    8d669fdf092e4fa4b92fc0c3f9742106


    Headers

    Imports

    Sections

  • iekey.exe
    .exe windows:4 windows x86 arch:x86

    3537565d611c1cfb479d853450bb861b


    Headers

    Imports

    Sections

  • lnkey.exe
    .exe windows:4 windows x86 arch:x86

    6602416a0ee70e48023ff33ec60c1a01


    Headers

    Imports

    Sections

  • mailkey.exe
    .exe windows:4 windows x86 arch:x86

    12d68ad93d1cf93357363ab53a6c7edc


    Headers

    Imports

    Sections

  • moneykey.exe
    .exe windows:4 windows x86 arch:x86

    d9a4cbecf83e6ae2c2e2dd54b9c7bff1


    Headers

    Imports

    Sections

  • msgrkey.exe
    .exe windows:4 windows x86 arch:x86

    df976aaeda12de585eb1fdf9424163c1


    Headers

    Imports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • myobkey.exe
    .exe windows:4 windows x86 arch:x86

    3f7412be21a6ddd6b0da7c20b671299a


    Headers

    Imports

    Sections

  • nckey.exe
    .exe windows:4 windows x86 arch:x86

    b24304837667a78a7e4aa1e60106fe25


    Headers

    Imports

    Sections

  • oekey.exe
    .exe windows:4 windows x86 arch:x86

    90f85083f074dc736809ac75216a906b


    Headers

    Imports

    Sections

  • offkey.exe
    .exe windows:4 windows x86 arch:x86

    c7a9b49b35c5fd25589c5461d289b08e


    Headers

    Imports

    Sections

  • onkey.exe
    .exe windows:4 windows x86 arch:x86

    cd4388ee135bf53b85846946d2b999dc


    Headers

    Imports

    Sections

  • orgkey.exe
    .exe windows:4 windows x86 arch:x86

    b620419fc8d7b2c6922b55423c27b1b6


    Headers

    Imports

    Sections

  • pdoxkey.exe
    .exe windows:4 windows x86 arch:x86

    c4e81303e2f9062cf2b58283bbe3cc92


    Headers

    Imports

    Sections

  • peachkey.exe
    .exe windows:4 windows x86 arch:x86

    a862247499a038688ac7f60f5fe964cd


    Headers

    Imports

    Sections

  • pk.chm
    .chm
  • pk81.dll
    .dll windows:4 windows x86 arch:x86

    f4d5030e0b5e9241ff90a3d8665158f2


    Headers

    Imports

    Exports

    Sections

  • projkey.exe
    .exe windows:4 windows x86 arch:x86

    a99fc4fbe5aa992a52b5dc91d4ee2a7f


    Headers

    Imports

    Sections

  • qbkey.exe
    .exe windows:4 windows x86 arch:x86

    3086fa3dcb27e3071770ce29116b334e


    Headers

    Imports

    Sections

  • qpkey.exe
    .exe windows:4 windows x86 arch:x86

    0d1b4cf2e9e48a533da6dc51b2e102d3


    Headers

    Imports

    Sections

  • quickey.exe
    .exe windows:4 windows x86 arch:x86

    183cad0e2f00805bb8f6343a90396b5b


    Headers

    Imports

    Sections

  • rarkey.exe
    .exe windows:4 windows x86 arch:x86

    27620f0fa5b0a644ff7674d698f2694c


    Headers

    Imports

    Sections

  • scdkey.exe
    .exe windows:4 windows x86 arch:x86

    2c9af81451a61116ea66b8af96a6d6e7


    Headers

    Imports

    Sections

  • sqlkey.exe
    .exe windows:4 windows x86 arch:x86

    849bd9e82513029fe97838ff0d11a25e


    Headers

    Imports

    Sections

  • un-kitd.exe.nsis
  • winkey.exe
    .exe windows:4 windows x86 arch:x86

    a88548783f70c3d140cac8758d447054


    Headers

    Imports

    Sections

  • wpkey.exe
    .exe windows:4 windows x86 arch:x86

    03513d087504e173a78c7e552f7a711e


    Headers

    Imports

    Sections

  • wprokey.exe
    .exe windows:4 windows x86 arch:x86

    24f3d924b6ffda5e547e8d81228c915f


    Headers

    Imports

    Sections

  • zipkey.exe
    .exe windows:4 windows x86 arch:x86

    abe4cb6ac56af414d5811e421688934b


    Headers

    Imports

    Sections