General

  • Target

    fa8229acb64d35a82db9e6e2c625a4d9_JaffaCakes118

  • Size

    1.2MB

  • MD5

    fa8229acb64d35a82db9e6e2c625a4d9

  • SHA1

    0b245ef98ccc58a0eca9a19320dce9385f0964b7

  • SHA256

    71b711d08c5e8ca481aab499b1ece6acdec1c4d3e7f6ee8caf63f32b76544e6d

  • SHA512

    fa316bc86510a34c0f78bc84e0616c6f1994e7fa7dcf91c042883bdcf82c9d255f885e3d8d7a841bdcb0edcda7afbdcc2ed829f366631f353c07af00ff5fc14a

  • SSDEEP

    24576:psYX2vzptbfKL1oX1Y5wrrRsrW7RdYxMn4iuKbQaqfQN+QfsqB:nGvz5Xa0Nsr4Qx64qfqqB0qB

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 3 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • fa8229acb64d35a82db9e6e2c625a4d9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e160ef8e55bb9d162da4e266afd9eef3


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    6b7d154c806f1e47db325229c300c6df


    Headers

    Imports

    Exports

    Sections

  • $TEMP/SDM143/ExentCtlInstaller.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • $TEMP/SDM143/Free Ride Games.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/SDM143/Splash/loader1.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader2.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader3.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader4.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader5.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader6.jpg
    .jpg
  • $TEMP/SDM143/Splasher.dll
    .dll windows:5 windows x86 arch:x86

    8926e573f4b66cfe7558e5db5a6688aa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/SDM143/cmhelper.exe
    .exe windows:4 windows x86 arch:x86

    f5c5d75dcb7ff0affa88aae192f72bf4


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/SDM143/resourceDll.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections