General

  • Target

    e062ab8f3a0b6f89be8e142ccf12e109_JaffaCakes118

  • Size

    453KB

  • MD5

    e062ab8f3a0b6f89be8e142ccf12e109

  • SHA1

    ac23ec726f4b1d6521a087ecbff40d6436ddc355

  • SHA256

    109d2c68ae248842419691db5704822c6f96ec1472c62ecb372d80d55d167408

  • SHA512

    6c3cbf28459d8c746b4a46e522f1e01a5051da996f4e2a8e921663ea3f16afc97ca38ee3b00adda3d5831dc8b4c76dd4c9b72e297fcb587436cb6ed67d2912fb

  • SSDEEP

    12288:AwW9bX6QzUAGS1s15Ap/G/8g3D0Fw/tN8dkmLtpHHHrh702:AhbKWUAGS6j8gz0FmcLbH102

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • e062ab8f3a0b6f89be8e142ccf12e109_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/CRCCheck.dll
    .dll windows:4 windows x86 arch:x86

    56a7e7c785b45feca5044db94364da78


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ExecDos.dll
    .dll windows:5 windows x86 arch:x86

    b997a221e444f5e6463b28778735cf2b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IpConfig.dll
    .dll windows:5 windows x86 arch:x86

    a9988f98d52a3c7d16228f87844f85ea


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISEncrypt.dll
    .dll windows:5 windows x86 arch:x86

    91658770b7f3f055664c8505aaf8e5be


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WmiInspector.dll
    .dll windows:5 windows x86 arch:x86

    893d2a1fb4fd2bf2988199c0b6434074


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsJSON.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • 7za.exe
    .exe windows:4 windows x86 arch:x86

    a27a282eaa8dea8ef01eb4bdd213fffb


    Headers

    Imports

    Sections