Overview

overview

7

Static

static

7

d58e75cc04...18.exe

windows7-x64

7

d58e75cc04...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$TEMP/Dialog/7za.dll

windows7-x64

3

$TEMP/Dialog/7za.dll

windows10-2004-x64

3

js/bramus/...ler.js

windows7-x64

3

js/bramus/...ler.js

windows10-2004-x64

3

js/def.js

windows7-x64

3

js/def.js

windows10-2004-x64

3

js/prototy...ype.js

windows7-x64

3

js/prototy...ype.js

windows10-2004-x64

3

page.html

windows7-x64

3

page.html

windows10-2004-x64

3

page2.html

windows7-x64

3

page2.html

windows10-2004-x64

3

page3.html

windows7-x64

3

page3.html

windows10-2004-x64

3

page4.html

windows7-x64

3

page4.html

windows10-2004-x64

1

$TEMP/Dialog/sfx7.dll

windows7-x64

3

$TEMP/Dialog/sfx7.dll

windows10-2004-x64

3

opengl32/opengl32.dll

windows7-x64

7

opengl32/opengl32.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d58e75cc04bd3bd64c692aeef1170779_JaffaCakes118

  • Size

    2.1MB

  • MD5

    d58e75cc04bd3bd64c692aeef1170779

  • SHA1

    ec42318efc3fe46c61b91e4cb7c263df8417b480

  • SHA256

    6bef2afa2889f3d5f30a3a0d64c0e66cde080dffa3f888aa5f9588eaa2694d13

  • SHA512

    447bd13dca87c72404ae4efebd782fc809a4c36d41e7ac21e9787bbd02421d04ee06636ad10fb427ccf80802ffd57071c099df9c0e57723993d273239202da91

  • SSDEEP

    49152:LKHqQ6FsXLimtDlGNYRY8D3eN/iApEHrN4cgqtlivmfeN:LOosXLimRl+S3QjEHh4Mi+WN

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • d58e75cc04bd3bd64c692aeef1170779_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Dialog/7za.dll
    .dll windows:4 windows x86 arch:x86

    3726b8c597bbd6bac65abe3d0400a84f


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Dialog/COMMENT
  • $TEMP/Dialog/COVER
    .7z
  • images/Thumbs.db
  • images/bg-office-1.png
    .png
  • images/bg-office-2.png
    .png
  • images/bg-office.png
    .png
  • images/bramus/Thumbs.db
  • images/bramus/percentImage.gif
    .gif
  • images/bramus/percentImage.png
    .png
  • images/bramus/percentImage_back.png
    .png
  • images/btn-bg-active.png
    .png
  • images/btn-bg.png
    .png
  • images/icons/Thumbs.db
  • images/icons/add.gif
    .gif
  • images/icons/empty.gif
    .gif
  • images/icons/fill.gif
    .gif
  • images/icons/get.gif
    .gif
  • images/icons/minus.gif
    .gif
  • images/icons/set.gif
    .gif
  • js/bramus/jsProgressBarHandler.js
    .js
  • js/def.js
    .js
  • js/prototype/prototype.js
    .js
  • page.html
    .html .js polyglot
  • page2.html
    .js
  • page3.html
    .js
  • page4.html
    .js
  • style.css
  • $TEMP/Dialog/CST
  • $TEMP/Dialog/FLIST
  • $TEMP/Dialog/IDV
  • $TEMP/Dialog/INFO
  • $TEMP/Dialog/ico.dat
  • $TEMP/Dialog/sfx7.dll
    .dll windows:5 windows x86 arch:x86

    5b1dfd98f0274673e6b629eab5329c8f


    Headers

    Imports

    Exports

    Sections

  • opengl32/opengl32.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections