General

  • Target

    fa2f8ce968483bfdbba00dacb9e5ef9b_JaffaCakes118

  • Size

    2.1MB

  • MD5

    fa2f8ce968483bfdbba00dacb9e5ef9b

  • SHA1

    6d264d92a395d90422e6cc8745fbefbc3c083197

  • SHA256

    63baa6f4cb8c4fac658e96a6cc6533d6b68e2fb7157b0a7bc6e5716125509eec

  • SHA512

    9d35aeaaee84301219d92a38f2dfcb3463e9f9aa8929e1c5dae96e0d93de92a1c09d400db3c6d53bc120e94ab264f46dcfb8844b0cdf5c7be3a406915620bd78

  • SSDEEP

    49152:z3Jp7lNNQRqrBX3DbVK9cN055DhHSRYuEvhY0p9FDXSSExbX:z3n77N4qrxnVK940nDhHSyuEpYg9FDXa

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • fa2f8ce968483bfdbba00dacb9e5ef9b_JaffaCakes118
    .rar
  • LimeWireTurboAccelerator_installer.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BST.bmp
  • $PLUGINSDIR/Best_Security_Tips.exe
    .exe windows:4 windows x86 arch:x86

    81638d02019c0bfcaaf23a9c69f2f12c


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Best_Security_Tips.xpi
    .zip
  • META-INF/manifest.mf
  • META-INF/zigbert.rsa
  • META-INF/zigbert.sf
  • chrome/best_security_tips.jar
    .zip
  • content/about.xul
    .js .xml polyglot
  • content/autocomplete-menulist.xml
    .js .xml polyglot
  • content/best_security_tipsOverlay.xul
    .xml
  • content/contents.rdf
    .xml
  • content/ebglobals.js
    .js
  • content/ebio.js
    .js
  • content/ebtoolbar.js
    .js
  • content/emailnotifier.js
    .js
  • content/enAddEdit.xul
    .js .xml polyglot
  • content/enConfirm.xul
    .js .xml polyglot
  • content/enSettings.xul
    .js .xml polyglot
  • content/enTestAccount.xul
    .xml
  • content/feed.js
    .js
  • content/feed.xul
    .xml
  • content/feed_confirm.xul
    .js .xml polyglot
  • content/feed_linux.xul
    .xml
  • content/feed_mac.xul
    .xml
  • content/generic.js
    .js
  • content/generic.xul
    .xml
  • content/multi_feed.xul
    .xml
  • content/multicommunity.js
    .js
  • content/multicommunity.xul
    .xml
  • content/multicommunity_detected.xul
    .js .xml polyglot
  • content/multicommunity_download.xul
    .xml
  • content/oldapi/feed_oldapi.xul
    .xml
  • content/oldapi/multi_feed_oldapi.xul
    .xml
  • content/oldapi/weather_oldapi.xul
    .xml
  • content/options.js
    .js
  • content/options.xul
    .xml
  • content/popup.xul
    .js .xml polyglot
  • content/radio.js
    .js
  • content/radio.xml
    .xml
  • content/radio_addEdit.xul
    .js .xml polyglot
  • content/radio_menu.xul
    .xml
  • content/radio_search.xul
    .xml
  • content/radio_volume.xul
    .xml
  • content/searchBox-suggest.xml
    .js .xml polyglot
  • content/toolbarapi.js
    .js
  • content/toolbarcomponents.js
    .js
  • content/weather.js
    .js
  • content/weather.xul
    .xml
  • content/welcome.xul
    .xml
  • skin/FloatingWindowTitleBG.png
    .png
  • skin/FloatingWindowTitle_close.png
    .png
  • skin/FloatingWindowTitle_close_dn.png
    .png
  • skin/FloatingWindowTitle_max.png
    .png
  • skin/FloatingWindowTitle_max_dn.png
    .png
  • skin/FloatingWindowTitle_min.png
    .png
  • skin/FloatingWindowTitle_min_dn.png
    .png
  • skin/ScrollbarBindings.xml
    .xml
  • skin/bgAbout.png
    .png
  • skin/blank.png
    .png
  • skin/block.png
    .png
  • skin/chevron.png
    .png
  • skin/chevron_rtl.png
    .png
  • skin/contents.rdf
    .xml
  • skin/ebdialogstyle.css
  • skin/ebtoolbarstyle.css
  • skin/email.png
    .png
  • skin/emailnew.png
    .png
  • skin/emailnewsmall.png
    .png
  • skin/enSound.wav
  • skin/feedRTL_bg.png
    .png
  • skin/feed_bg.png
    .png
  • skin/feed_comment.png
    .png
  • skin/feed_comment_over.png
    .png
  • skin/feed_delete.png
    .png
  • skin/feed_delete_dis.png
    .png
  • skin/feed_delete_over.png
    .png
  • skin/feed_env_read.png
    .png
  • skin/feed_env_unread.png
    .png
  • skin/feed_read.png
    .png
  • skin/feed_read_dis.png
    .png
  • skin/feed_read_over.png
    .png
  • skin/feed_refresh.png
    .png
  • skin/feed_refresh_over.png
    .png
  • skin/feed_unread.png
    .png
  • skin/feed_unread_dis.png
    .png
  • skin/feed_unread_over.png
    .png
  • skin/go_btn.gif
    .gif
  • skin/go_btnRTL.gif
    .gif
  • skin/highlighter.png
    .png
  • skin/highlighterDisabled.png
    .png
  • skin/highlighterSearchTerm.png
    .png
  • skin/highlighter_chevron.png
    .png
  • skin/loading.gif
    .gif
  • skin/mc_add_active.png
    .png
  • skin/mc_add_candidate.png
    .png
  • skin/mc_add_flashing.gif
    .gif
  • skin/mc_add_inactive.png
    .png
  • skin/mc_community.png
    .png
  • skin/mc_community_dialog.png
    .png
  • skin/mc_community_dialog_over.png
    .png
  • skin/mc_community_selected.png
    .png
  • skin/mc_community_starred.png
    .png
  • skin/mc_options.png
    .png
  • skin/mc_search.png
    .png
  • skin/mc_tooltip_addTo.gif
    .gif
  • skin/mc_tooltip_addTo_dn.gif
    .gif
  • skin/mc_tooltip_addTo_over.gif
    .gif
  • skin/mc_tooltip_close.gif
    .gif
  • skin/mc_tooltip_close_dn.gif
    .gif
  • skin/mc_tooltip_close_over.gif
    .gif
  • skin/mc_tooltip_next.gif
    .gif
  • skin/mc_tooltip_next_dis.gif
    .gif
  • skin/mc_tooltip_next_dn.gif
    .gif
  • skin/mc_tooltip_next_over.gif
    .gif
  • skin/mc_tooltip_prev.gif
    .gif
  • skin/mc_tooltip_prev_dis.gif
    .gif
  • skin/mc_tooltip_prev_dn.gif
    .gif
  • skin/mc_tooltip_prev_over.gif
    .gif
  • skin/mc_tooltip_separator.gif
    .gif
  • skin/minibrowser.png
    .png
  • skin/multicommunityDialog_bg.png
    .png
  • skin/radio/Podcast.png
    .png
  • skin/radio/RadioCombo.gif
    .gif
  • skin/radio/RadioEqualizerLoading.gif
    .gif
  • skin/radio/RadioEqualizerPause.gif
    .gif
  • skin/radio/RadioEqualizerPlay.gif
    .gif
  • skin/radio/RadioEqualizerReal.ico
  • skin/radio/RadioEqualizerSilent.gif
    .gif
  • skin/radio/RadioError.gif
    .gif
  • skin/radio/RadioErrow.ico
  • skin/radio/RadioErrowRTL.ico
  • skin/radio/RadioImgChev.ico
  • skin/radio/RadioMaxi.gif
    .gif
  • skin/radio/RadioMaxi_dn.gif
    .gif
  • skin/radio/RadioMaxi_on.gif
    .gif
  • skin/radio/RadioMini.gif
    .gif
  • skin/radio/RadioMini_dn.gif
    .gif
  • skin/radio/RadioMini_on.gif
    .gif
  • skin/radio/RadioPause.gif
    .gif
  • skin/radio/RadioPauseChev.ico
  • skin/radio/RadioPause_dn.gif
    .gif
  • skin/radio/RadioPause_on.gif
    .gif
  • skin/radio/RadioPlay.gif
    .gif
  • skin/radio/RadioPlayChev.ico
  • skin/radio/RadioPlay_dn.gif
    .gif
  • skin/radio/RadioPlay_on.gif
    .gif
  • skin/radio/RadioSliderBG.gif
    .gif
  • skin/radio/RadioSliderBall.gif
    .gif
  • skin/radio/RadioStop.gif
    .gif
  • skin/radio/RadioStopChev.ico
  • skin/radio/RadioStop_dn.gif
    .gif
  • skin/radio/RadioStop_on.gif
    .gif
  • skin/radio/RadioStrip.gif
    .gif
  • skin/radio/RadioTooltipPlaying.gif
    .gif
  • skin/radio/RadioTooltipStopped.gif
    .gif
  • skin/radio/RadioVolume.gif
    .gif
  • skin/radio/RadioVolume_dn.gif
    .gif
  • skin/radio/RadioVolume_on.gif
    .gif
  • skin/radio/RealLogo.png
    .png
  • skin/radio/WMPLogo.png
    .png
  • skin/radio/default_skin.xml
    .xml
  • skin/radio/defaultskin/RadioImgChev.ico
  • skin/radio/defaultskin/RadioPlayChev.ico
  • skin/radio/defaultskin/RadioStopChev.ico
  • skin/radio/defaultskin/display.gif
    .gif
  • skin/radio/defaultskin/equalizer_buffering.gif
    .gif
  • skin/radio/defaultskin/equalizer_error.gif
    .gif
  • skin/radio/defaultskin/equalizer_playing.gif
    .gif
  • skin/radio/defaultskin/equalizer_stopped.gif
    .gif
  • skin/radio/defaultskin/equalizer_stopped1.gif
    .gif
  • skin/radio/defaultskin/maxi.png
    .png
  • skin/radio/defaultskin/maxi_dn.png
    .png
  • skin/radio/defaultskin/maxi_over.png
    .png
  • skin/radio/defaultskin/minimize.png
    .png
  • skin/radio/defaultskin/minimize_dn.png
    .png
  • skin/radio/defaultskin/minimize_over.png
    .png
  • skin/radio/defaultskin/pause.gif
    .gif
  • skin/radio/defaultskin/pause_dn.gif
    .gif
  • skin/radio/defaultskin/pause_over.gif
    .gif
  • skin/radio/defaultskin/play.gif
    .gif
  • skin/radio/defaultskin/play_dn.gif
    .gif
  • skin/radio/defaultskin/play_over.gif
    .gif
  • skin/radio/defaultskin/slider.gif
    .gif
  • skin/radio/defaultskin/slider_bg.png
    .png
  • skin/radio/defaultskin/slider_dn.gif
    .gif
  • skin/radio/defaultskin/slider_over.gif
    .gif
  • skin/radio/defaultskin/stop.png
    .png
  • skin/radio/defaultskin/stop_dn.png
    .png
  • skin/radio/defaultskin/stop_over.png
    .png
  • skin/radio/defaultskin/vol.gif
    .gif
  • skin/radio/defaultskin/vol_dn.gif
    .gif
  • skin/radio/defaultskin/vol_over.gif
    .gif
  • skin/scrollbar/down-active.png
    .png
  • skin/scrollbar/down.png
    .png
  • skin/scrollbar/horizontal-background.png
    .png
  • skin/scrollbar/horizontal-gripper.png
    .png
  • skin/scrollbar/horizontal-thumb-end.png
    .png
  • skin/scrollbar/horizontal-thumb-start.png
    .png
  • skin/scrollbar/horizontal-thumb.png
    .png
  • skin/scrollbar/left-active.png
    .png
  • skin/scrollbar/left.png
    .png
  • skin/scrollbar/right-active.png
    .png
  • skin/scrollbar/right.png
    .png
  • skin/scrollbar/slider.gif
    .gif
  • skin/scrollbar/up-active.png
    .png
  • skin/scrollbar/up.png
    .png
  • skin/scrollbar/vertical-background.png
    .png
  • skin/scrollbar/vertical-gripper.png
    .png
  • skin/scrollbar/vertical-thumb-end.png
    .png
  • skin/scrollbar/vertical-thumb-start.png
    .png
  • skin/scrollbar/vertical-thumb.png
    .png
  • skin/scrollbars.css
  • skin/separator.png
    .png
  • skin/splitter.ico
  • skin/star.png
    .png
  • skin/v.png
    .png
  • skin/warning.png
    .png
  • skin/weather.png
    .png
  • skin/weather_bg.png
    .png
  • skin/weather_bullet.png
    .png
  • skin/weather_close.png
    .png
  • skin/weather_close_dn.png
    .png
  • skin/weather_na.png
    .png
  • skin/welcome.bmp
  • skin/x.png
    .png
  • components/ConduitAutoCompleteSearch.js
    .js
  • components/ConduitAutoCompleteSearch.xpt
  • defaults/default_radio_skin.xml
    .xml
  • install.rdf
    .xml
  • searchplugin/conduit.PNG
    .png
  • searchplugin/conduit.gif
    .gif
  • searchplugin/conduit.ico
  • searchplugin/conduit.src
  • searchplugin/conduit.xml
  • version.txt
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/setup.ini
  • LimeWire Turbo Accelerator.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • SkinMagic.dll
    .dll windows:4 windows x86 arch:x86

    73311293c21223a65c49aac91966fa84


    Headers

    Imports

    Exports

    Sections

  • packet.dll
    .dll windows:4 windows x86 arch:x86

    dc8c0d40b34348cdabb47af1cd619332


    Headers

    Imports

    Exports

    Sections

  • skin.smf
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • 新云软件.url
    .url