General

  • Target

    f0abd96a38ed903947b42592d02e38c6_JaffaCakes118

  • Size

    3.1MB

  • MD5

    f0abd96a38ed903947b42592d02e38c6

  • SHA1

    7415e5d1aa64b5b590bae6a9701717273180150e

  • SHA256

    1174d2d36ab86bd52650fc086af7c2f226a55db34bd3d0fd966c0b6c070a4342

  • SHA512

    626aeabd5e2c4f644cc487fd12a171138b8c7dc18b23642da4b03d2013654a0d3cdc8445708dad9738752dd404124337681081fcfff5a1c549a5686f21b21596

  • SSDEEP

    49152:OnIh6OCiyGnhSyhxPw0Pelu8G5UozmzY7KqMFkQDnUt47tS83jVLxwY4sS:On9xJGhSyFPeoVOoHXu/nUt4EAZeYc

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • f0abd96a38ed903947b42592d02e38c6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7ed0d71376e55d58ab36dc7d3ffda898


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ShellExecAsUser.dll
    .dll windows:6 windows x86 arch:x86

    570b9c82ffd1c2aa6c10fc8393f7206c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/md5dll.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ec5fddc407d2b4e0a16fc4d786afc555


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$0.nsis
  • $TEMP/$_83_/InstSupp.dll
    .dll windows:6 windows x86 arch:x86

    6ad5b475f35b48a01dd7d756e000beb0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FireFox/bootstrap.js
    .js
  • FireFox/chrome.manifest
  • FireFox/content/css/popup.css
  • FireFox/content/html/popup.html
    .html
  • FireFox/content/images/audio16.png
    .png
  • FireFox/content/images/error32.png
    .png
  • FireFox/content/images/icon16.png
    .png
  • FireFox/content/images/icon19.png
    .png
  • FireFox/content/images/icon32.png
    .png
  • FireFox/content/images/icon38.png
    .png
  • FireFox/content/images/icon48.png
    .png
  • FireFox/content/images/loading32.gif
    .gif
  • FireFox/content/images/ok32.png
    .png
  • FireFox/content/images/video16.png
    .png
  • FireFox/content/js/uid.js
  • FireFox/icon.png
    .png
  • FireFox/install.rdf
    .xml
  • FireFox/skin/icon16.png
    .png
  • FireFox/skin/icon32.png
    .png
  • FireFox/skin/toolbar.css
  • Modules/7z.dll
    .dll windows:4 windows x86 arch:x86

    71fc45db7a81ce236f432a828a4e8fcd


    Headers

    Imports

    Exports

    Sections

  • Modules/ArSp.dll
    .dll windows:6 windows x86 arch:x86

    4ed7437741b2d8023c306020fccb486f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Modules/BdUdr.dll
    .dll windows:6 windows x86 arch:x86

    12f79587fa95dc37bd26f97e332bf4e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Modules/BrSp.dll
    .dll windows:6 windows x86 arch:x86

    ab6bc0f1d4412ab782a30b87e717e5d2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Modules/CdPrc.dll
    .dll windows:6 windows x86 arch:x86

    ada7175e04cf8cb32616395cadb082e7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Modules/Core.dll
    .dll windows:6 windows x86 arch:x86

    6cd14a259d294f46206c789d7c8541cc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Modules/InstSupp.dll
    .dll windows:6 windows x86 arch:x86

    6ad5b475f35b48a01dd7d756e000beb0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Modules/WInIn.dll
    .dll windows:6 windows x86 arch:x86

    0cf0f66bdfd4b109fe52657acbb94d3d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Modules/WbSt.dll
    .dll windows:6 windows x86 arch:x86

    ea0f27243a9302b6e303ef077587689c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Modules/WdCtl.dll
    .dll windows:6 windows x86 arch:x86

    2983d586e5b4549be55657e6e0047d0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Ninja Loader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Ninja Loader.exe.config
  • NinjaMaintainer.exe
    .exe windows:6 windows x86 arch:x86

    9efb36435d4855f6f50e5e917a95a902


    Code Sign

    Headers

    Imports

    Sections

  • msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • un_.nsis
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7ed0d71376e55d58ab36dc7d3ffda898


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/advsplash.dll
    .dll windows:4 windows x86 arch:x86

    a40343b64a65b9d8545d9a279e634faf


    Headers

    Imports

    Exports

    Sections

  • $TEMP/spltmp.bmp