Overview

overview

7

Static

static

7

d5517f3fcf...18.exe

windows7-x64

7

d5517f3fcf...18.exe

windows10-2004-x64

7

$PLUGINSDI...64.dll

windows7-x64

3

$PLUGINSDI...64.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...om.dll

windows7-x64

7

$PLUGINSDI...om.dll

windows10-2004-x64

7

MD5�...��.exe

windows7-x64

3

MD5�...��.exe

windows10-2004-x64

3

Uk.b/ģ...��.dll

windows7-x64

3

Uk.b/ģ...��.dll

windows10-2004-x64

3

Uk.b/�...��.dll

windows7-x64

3

Uk.b/�...��.dll

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d5517f3fcf8f6ff746fe110845314146_JaffaCakes118

  • Size

    852KB

  • MD5

    d5517f3fcf8f6ff746fe110845314146

  • SHA1

    d89fa4fae4ae263da72033c85830d2d6cb0c3745

  • SHA256

    c4c14f956231c15301758d8399264d28f9a930e22c2c5d2a2cf94185c82b264e

  • SHA512

    c19d235ab20a7375407090fea71bc74648601c39319580fb39a03c17eee7699f5d03cf064e252b6ef54503a7de278c9e25eecc2f12774fdf5dc753b5c0c83d78

  • SSDEEP

    24576:i22ujYm/ZfcQMrzS5Fe9aTsq5F9AuFf0tMH9MOzoaMSvFkL6MRGBuW:XdhfcQM3S/e4TsqlAuFMKHW3aMsF0M1

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • d5517f3fcf8f6ff746fe110845314146_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Baidubar.bmp
  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    1ba6926a1ee4e4cda118768081f528d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/blowfish.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/left.bmp
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRandom.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/regini.ini
  • Key.txt
  • Keys.Uk.b.key
  • MD5˼ǿ.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Uk.b/ģֵ.dll
    .dll windows:4 windows x86 arch:x86

    84f7f586c79eaeff43e47789083f877c


    Headers

    Imports

    Exports

    Sections

  • Uk.b/ղ.dll
    .dll windows:4 windows x86 arch:x86

    c90787dc81cd48baa3ab8f9aac14ab46


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp