General

  • Target

    d988149f1c798933021aa43fce459b47_JaffaCakes118

  • Size

    801KB

  • MD5

    d988149f1c798933021aa43fce459b47

  • SHA1

    90ac875694d5cbde4220a3cbabfa8a3921c53220

  • SHA256

    33373dbb5abba52fb2289f8e9635840128ed5c9dc2db920eda6af34b2c1447e5

  • SHA512

    6d45f2d9f9826f2d8243995cfb64f426ff856c38e98952eba9fa1035d4c2d5516a063ca5f373b31138685b83b719b68ded0b6c3a6c93e90517fb15b0f4c46b5f

  • SSDEEP

    12288:+xpJUP0Wv3KAudH3iIckennuwMfdt6NTkA9w/XLautQMcot3bU5sJh16n9Idcm:KpW1v3KA0ZjeudT639putQMXt3bKstym

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • d988149f1c798933021aa43fce459b47_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/AdvancedTests.lua
  • $PLUGINSDIR/BrowserControl.lua
  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CustomBrandingURL.dll
    .dll windows:5 windows x86 arch:x86

    82f18b0f522c05f362fb12db10cdf296


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CustomNSISdl.dll
    .dll windows:5 windows x86 arch:x86

    e8a575fc69c67b8f92ba9e9cb62af0bf


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CustomnsWeb.dll
    .dll windows:5 windows x86 arch:x86

    199dbccca3cc8b8a2cf04186d02f4abf


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Events.lua
  • $PLUGINSDIR/FloatingProgress.dll
    .dll windows:5 windows x86 arch:x86

    1806d0504ce03d24690879c2a67010a6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GuiInit.lua
    .js
  • $PLUGINSDIR/IntegratedOffer-Truste.html
    .html .js polyglot
  • $PLUGINSDIR/IntegratedOffer.lua
  • $PLUGINSDIR/LuaBridge.dll
    .dll windows:5 windows x86 arch:x86

    4682694a7b56ff53baef1a0f1a91f5b0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LuaSocket/lua/ltn12.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/mime.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/socket.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/socket/ftp.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/socket/http.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/socket/smtp.lua
  • $PLUGINSDIR/LuaSocket/lua/socket/tp.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/socket/url.lua
  • $PLUGINSDIR/LuaSocket/mime/core.dll
    .dll windows:4 windows x86 arch:x86

    fe8e49b45d854066bc51a41f61066908


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LuaSocket/socket/core.dll
    .dll windows:4 windows x86 arch:x86

    f7bb4b78321004f93f7e54fe50af1981


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LuaXml.lua
  • $PLUGINSDIR/LuaXml_lib.dll
    .dll windows:4 windows x86 arch:x86

    0e4b7cfc82eb1d2e2840274f1659b95a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NotifyIcon.dll
    .dll windows:4 windows x86 arch:x86

    e043e246d8abcbb9de2ad82c6e18cd88


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/__localxml.xml
  • $PLUGINSDIR/custominetc.dll
    .dll windows:4 windows x86 arch:x86

    cb0a607a2c9593bb9c969e6ca75c2b88


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/definitions.lua
  • $PLUGINSDIR/extension.tlb
  • $PLUGINSDIR/json.lua
  • $PLUGINSDIR/lua51.dll
    .dll windows:4 windows x86 arch:x86

    0b930a47b5846bb154dc0be3d35f00ab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/luacom.dll
    .dll windows:5 windows x86 arch:x86

    148172081107200e70753e16a32c0c9a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:5 windows x86 arch:x86

    4c04c20a976733bf789fead96eb58701


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/res/common.css
  • $PLUGINSDIR/res/common.js
    .js
  • $PLUGINSDIR/res/jquery.js
    .js
  • $PLUGINSDIR/skin/DALogo.jpg
    .jpg
  • $PLUGINSDIR/skin/DALogo2.gif
    .gif
  • $PLUGINSDIR/skin/accept.gif
    .gif
  • $PLUGINSDIR/skin/back.gif
    .gif
  • $PLUGINSDIR/skin/back_button.png
    .png
  • $PLUGINSDIR/skin/bg.gif
    .gif
  • $PLUGINSDIR/skin/bg2.gif
    .gif
  • $PLUGINSDIR/skin/cancel.css
  • $PLUGINSDIR/skin/cancel.gif
    .gif
  • $PLUGINSDIR/skin/cancel_button.png
    .png
  • $PLUGINSDIR/skin/close.gif
    .gif
  • $PLUGINSDIR/skin/decline.gif
    .gif
  • $PLUGINSDIR/skin/headerBG.gif
    .gif
  • $PLUGINSDIR/skin/mod.css
  • $PLUGINSDIR/skin/offers.css
  • $PLUGINSDIR/skin/progress.css
  • $PLUGINSDIR/skin/stepBG.gif
    .gif
  • $PLUGINSDIR/skin/step_off.gif
    .gif
  • $PLUGINSDIR/skin/step_on.gif
    .gif
  • $PLUGINSDIR/skin/truste.gif
    .gif
  • $PLUGINSDIR/skin/vlcmediaplayer-128x128.png
    .png
  • $PLUGINSDIR/skin/winclose_button.png
    .png
  • $PLUGINSDIR/skin/winmin_button.png
    .png
  • $PLUGINSDIR/un.package.exe
    .exe windows:5 windows x86 arch:x86

    35b698a6fd5038f719a27b089cb1f48e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/utils.lua
  • $PLUGINSDIR/version.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections