General

  • Target

    f642ce0886630fc3028a2ef382c71423_JaffaCakes118

  • Size

    1.2MB

  • MD5

    f642ce0886630fc3028a2ef382c71423

  • SHA1

    7b09d25aeaa0104d208d827ce8ec6a86d748c577

  • SHA256

    987aec1e5e4c41fd4eac7ec6e3ee2d069195b62366bd8e9fd90ae8d474cf20d9

  • SHA512

    cce2dee4b1014243b8ba5a1731b9500aa9a3601df512fcedf06779123d906b2e824ff979af3a235888bb111ac2217243fe6d6acf29ac4e4dd611a1c77351a8e4

  • SSDEEP

    24576:DU/rV/bfsGIWMV7uBRN6B5iDww1/CH7zcvbP0x47A:+Vfs0m7pGDb8KP0x4E

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • f642ce0886630fc3028a2ef382c71423_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallHelper.dll
    .dll windows:5 windows x86 arch:x86

    48a5383a7ce39b54ffbdc5f25781b686


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISAppUpdater.dll
    .dll windows:5 windows x86 arch:x86

    b208f07896cf7167cbe2f77b8cec1412


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISCommon.dll
    .dll windows:5 windows x86 arch:x86

    365783e8f913e7058f73f65772d3e7a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PluginInstaller.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/0/version.txt
  • .rsrc/1033/DIALOG/105
  • .rsrc/1033/DIALOG/106
  • .rsrc/1033/DIALOG/111
  • .rsrc/1033/GROUP_ICON/103
  • .rsrc/1033/ICON/1.ico
  • .rsrc/1033/MANIFEST/1
    .xml
  • .text
  • CERTIFICATE
  • [0]
  • [1]
  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsThread.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • $SYSDIR/$SYSDIR/atl100.dll
    .dll windows:5 windows x86 arch:x86

    0bbf1228f837ecb83ec693b705100bde


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/$SYSDIR/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/$SYSDIR/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_48_/$_48_/atl100.dll
    .dll windows:5 windows x86 arch:x86

    0bbf1228f837ecb83ec693b705100bde


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_48_/$_48_/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_48_/$_48_/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_63_/QQPCB1AndroidJmp/PluginInfo.xml
  • $_63_/QQPCB1AndroidJmp/QPMJmp.exe
    .exe windows:5 windows x86 arch:x86

    2daa4e251d086a329a58cc8411246764


    Code Sign

    Headers

    Imports

    Sections

  • $_63_/QQPCB1AndroidJmp/QQPCB1AndroidJmp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b6adf1e4dc047540e8c3c77030866bf8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_63_/QQPCB1AndroidJmp/QQPCB1AndroidJmp.png
    .png
  • $_63_/QQPCB2AndroidJmp/PluginInfo.xml
  • $_63_/QQPCB2AndroidJmp/QPMJmp.exe
    .exe windows:5 windows x86 arch:x86

    2daa4e251d086a329a58cc8411246764


    Code Sign

    Headers

    Imports

    Sections

  • $_63_/QQPCB2AndroidJmp/QQPCB2AndroidJmp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c019beb1660660e8578f44a803dd2911


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_63_/QQPCB2AndroidJmp/QQPCB2AndroidJmp.png
    .png
  • Android.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • atl100.dll
    .dll windows:5 windows x86 arch:x86

    0bbf1228f837ecb83ec693b705100bde


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections