General

  • Target

    d437fe821fab1aa89ac7bec511eb8b5d_JaffaCakes118

  • Size

    1.8MB

  • MD5

    d437fe821fab1aa89ac7bec511eb8b5d

  • SHA1

    25322eef38a8f32b7fde9f743e8f5dac771742cf

  • SHA256

    a8c37f65ce540519fe8ba195092a6c35c1f08899b5d83be239168684a8e4801f

  • SHA512

    15f8fd75752ebacf60664a7d16d54531bd19263e8cb87c45f7ba8b111fc314171145549e8ccce4edc2b21bff878338abd06b1f75f49dbc61363f84c0a5c91f20

  • SSDEEP

    49152:Gvvz1OPGYswPeqS/OE7oEUvXiCZx/VzQNBrtJRRAgQQ6cpMwM:qxOObwPe00ojvS6x9zYvTPv6YMx

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • d437fe821fab1aa89ac7bec511eb8b5d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Banner.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Microsoft.VC90.CRT.manifest
  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bundle.exe
    .exe windows:5 windows x86 arch:x86

    38f36237a903ed358a2bd0b8c5c73a6d


    Headers

    Imports

    Sections

  • $PLUGINSDIR/msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/tools.dll
    .dll windows:5 windows x86 arch:x86

    1b63fbcb3a1760b366862b3a44b1895b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/updater.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • FileHunter.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • updater.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections