General

  • Target

    d5afcefbb46ea1a2b976c534da37a9be_JaffaCakes118

  • Size

    3.1MB

  • MD5

    d5afcefbb46ea1a2b976c534da37a9be

  • SHA1

    a03631a062fb939c524420a04a278ef89a578c8d

  • SHA256

    2139c391a586bdfabb1d6c2627c19e2b1bc4e91629bc7fe986a18ed1c09ea5e8

  • SHA512

    537b85d53f3cd1ee2b50f3b8142043938079f3a1d76cf3a13f468e0901c51e10298d14e1f4c6734266a65f1be8ab0d637b91211dcfa8e97016560d181bdb114c

  • SSDEEP

    49152:7q6O4SEDzCG0DPUf0w0Pelu8G5Uoa59c3javfA72lDKazLOvzDq6B:79qgzCG0bUfGPeoVOoa59+valDKa066B

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • d5afcefbb46ea1a2b976c534da37a9be_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7ed0d71376e55d58ab36dc7d3ffda898


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ShellExecAsUser.dll
    .dll windows:6 windows x86 arch:x86

    570b9c82ffd1c2aa6c10fc8393f7206c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/md5dll.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ec5fddc407d2b4e0a16fc4d786afc555


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$0.nsis
  • $TEMP/$_83_/InstSupp.dll
    .dll windows:6 windows x86 arch:x86

    6ad5b475f35b48a01dd7d756e000beb0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FireFox/bootstrap.js
    .js
  • FireFox/chrome.manifest
  • FireFox/content/css/popup.css
  • FireFox/content/html/popup.html
    .html
  • FireFox/content/images/audio16.png
    .png
  • FireFox/content/images/error32.png
    .png
  • FireFox/content/images/icon16.png
    .png
  • FireFox/content/images/icon19.png
    .png
  • FireFox/content/images/icon32.png
    .png
  • FireFox/content/images/icon38.png
    .png
  • FireFox/content/images/icon48.png
    .png
  • FireFox/content/images/loading32.gif
    .gif
  • FireFox/content/images/ok32.png
    .png
  • FireFox/content/images/video16.png
    .png
  • FireFox/content/js/uid.js
  • FireFox/icon.png
    .png
  • FireFox/install.rdf
    .xml
  • FireFox/skin/icon16.png
    .png
  • FireFox/skin/icon32.png
    .png
  • FireFox/skin/toolbar.css
  • Modules/7z.dll
    .dll windows:4 windows x86 arch:x86

    71fc45db7a81ce236f432a828a4e8fcd


    Headers

    Imports

    Exports

    Sections

  • Modules/ArSp.dll
    .dll windows:6 windows x86 arch:x86

    4ed7437741b2d8023c306020fccb486f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Modules/BdUdr.dll
    .dll windows:6 windows x86 arch:x86

    12f79587fa95dc37bd26f97e332bf4e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Modules/BrSp.dll
    .dll windows:6 windows x86 arch:x86

    ab6bc0f1d4412ab782a30b87e717e5d2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Modules/CdPrc.dll
    .dll windows:6 windows x86 arch:x86

    ada7175e04cf8cb32616395cadb082e7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Modules/Core.dll
    .dll windows:6 windows x86 arch:x86

    6cd14a259d294f46206c789d7c8541cc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Modules/InstSupp.dll
    .dll windows:6 windows x86 arch:x86

    6ad5b475f35b48a01dd7d756e000beb0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Modules/WInIn.dll
    .dll windows:6 windows x86 arch:x86

    0cf0f66bdfd4b109fe52657acbb94d3d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Modules/WbSt.dll
    .dll windows:6 windows x86 arch:x86

    ea0f27243a9302b6e303ef077587689c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Modules/WdCtl.dll
    .dll windows:6 windows x86 arch:x86

    2983d586e5b4549be55657e6e0047d0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Ninja Loader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Ninja Loader.exe.config
  • NinjaMaintainer.exe
    .exe windows:6 windows x86 arch:x86

    9efb36435d4855f6f50e5e917a95a902


    Code Sign

    Headers

    Imports

    Sections

  • msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • un_.nsis
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7ed0d71376e55d58ab36dc7d3ffda898


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/advsplash.dll
    .dll windows:4 windows x86 arch:x86

    a40343b64a65b9d8545d9a279e634faf


    Headers

    Imports

    Exports

    Sections

  • $TEMP/spltmp.bmp