General

  • Target

    fe4fd5738af432afb17b79c7425bca5e_JaffaCakes118

  • Size

    4.5MB

  • MD5

    fe4fd5738af432afb17b79c7425bca5e

  • SHA1

    3657e24bfc987b0377c5649c8645dae10c9462f3

  • SHA256

    e64e263217f3d4098a00dbd7599791109fcce9619fe4c8a0e275c45ffb3ccc79

  • SHA512

    f82edf52a1fec3ec4c39118bbbdabd9ce6d39f5535c19b882c4c3cc896b5497b66762cd2a85154120d82de03005b147ddfab644834d4eef359b8c328a73ba696

  • SSDEEP

    98304:+VXkHkWvVET1BHBpxuumt2iRpaspMbDTtnh7mGxkA:GHW9KKNp5mthjkA

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • AutoIT Executable 5 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • fe4fd5738af432afb17b79c7425bca5e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DumpLog.dll
    .dll windows:4 windows x86 arch:x86

    db09deaefe977cb28b3feeb04f93d8a6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/version.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PROFILE/$PROFILE/abbrev.properties
  • $PROFILE/$PROFILE/au3UserAbbrev.properties
  • $PROFILE/$PROFILE/au3abbrev.properties
  • AutoIt3Wrapper/AutoIt3Wrapper.au3
    .ps1
  • AutoIt3Wrapper/AutoIt3Wrapper.exe
    .exe windows:5 windows x86 arch:x86

    04b4eec1b14791bf23f31173f27a5df0


    Headers

    Imports

    Sections

  • AutoIt3Wrapper/AutoIt3Wrapper.ini.example
  • AutoIt3Wrapper/Directives.au3
  • CodeWizard/CodeWizard.au3
    .ps1
  • CodeWizard/CodeWizard.chm
    .chm
  • CodeWizard/CodeWizard.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • CodeWizard/ReadMe.txt
    .vbs
  • Defs/Production/api/au3.api
  • Defs/Production/au3.keywords.properties
  • Defs/beta/api/au3.api
  • Defs/beta/au3.keywords.properties
  • Koda/FD.chm
    .chm
  • Koda/FD.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Koda/Language/help_eng.chm
    .chm
  • Koda/Language/lang_bg.xml
    .xml
  • Koda/Language/lang_bra.xml
    .xml
  • Koda/Language/lang_cze.xml
    .xml
  • Koda/Language/lang_fra.xml
    .xml
  • Koda/Language/lang_ger.xml
    .xml
  • Koda/Language/lang_ita.xml
    .xml
  • Koda/Language/lang_pol.xml
    .xml
  • Koda/Language/lang_rus.xml
    .xml
  • Koda/Language/lang_spa.xml
    .xml
  • Koda/Language/lang_zhcn.xml
    .xml
  • Koda/Language/lang_zhtw.xml
    .xml
  • Koda/Templates/About Box.kxf
    .xml
  • Koda/Templates/Dialog with help (vertical).kxf
    .xml
  • Koda/Templates/Dialog with help.kxf
    .xml
  • Koda/Templates/Dual ListBox.kxf
    .xml
  • Koda/Templates/Form.kxf
  • Koda/Templates/Password Dialog.kxf
    .xml
  • Koda/Templates/Standard Dialog (vertical).kxf
    .xml
  • Koda/Templates/Standard Dialog.kxf
    .xml
  • Koda/Templates/Tabbed Pages.kxf
    .xml
  • Koda/history.txt
  • Koda/styles.xml
  • License.txt
  • Obfuscator/Obfuscator.dat
  • Obfuscator/Obfuscator.exe
    .exe windows:4 windows x86 arch:x86

    f8d9690a2c80583bccd1edf84996d2c5


    Headers

    Imports

    Sections

  • Properties/Embedded.properties
  • Properties/ada.properties
  • Properties/asm.properties
  • Properties/au3.keywords.abbreviations.properties
  • Properties/au3.keywords.properties
  • Properties/au3.pixmap.properties
  • Properties/au3.properties
  • Properties/autoit3wrapper.keywords.properties
  • Properties/ave.properties
  • Properties/baan.properties
  • Properties/bcx.properties
  • Properties/blitzbasic.properties
  • Properties/bullant.properties
  • Properties/caml.properties
  • Properties/cmake.properties
    .vbs
  • Properties/conf.properties
  • Properties/cpp.properties
  • Properties/csound.properties
  • Properties/css.properties
  • Properties/d.properties
  • Properties/eiffel.properties
  • Properties/erlang.properties
  • Properties/escript.properties
  • Properties/flagship.properties
  • Properties/forth.properties
  • Properties/fortran.properties
  • Properties/freebasic.properties
  • Properties/html.properties
  • Properties/inno.properties
  • Properties/kix.properties
    .vbs
  • Properties/latex.properties
  • Properties/lisp.properties
  • Properties/lot.properties
  • Properties/lout.properties
  • Properties/lua.properties
  • Properties/matlab.properties
  • Properties/metapost.properties
  • Properties/mmixal.properties
  • Properties/nncrontab.properties
  • Properties/nsis.properties
  • Properties/opal.properties
  • Properties/others.properties
  • Properties/pascal.properties
  • Properties/perl.properties
  • Properties/pov.properties
  • Properties/ps.properties
  • Properties/purebasic.properties
  • Properties/python.properties
  • Properties/rebol.properties
  • Properties/ruby.properties
  • Properties/scriptol.properties
  • Properties/smalltalk.properties
  • Properties/specman.properties
  • Properties/spice.properties
  • Properties/sql.properties
  • Properties/tcl.properties
  • Properties/tex.properties
  • Properties/vb.properties
  • Properties/verilog.properties
  • Properties/vhdl.properties
  • Properties/yaml.properties
  • SciLexer.dll
    .dll windows:5 windows x86 arch:x86

    9779d79b46af8b03847dd7e49b9b48b4


    Headers

    Imports

    Exports

    Sections

  • SciTE.exe
    .exe windows:5 windows x86 arch:x86

    0bc3e9a154f8b9d64a4366d157f1fec1


    Headers

    Imports

    Exports

    Sections

  • SciTEConfig/MSDEV.SciTEConfig
  • SciTEConfig/MSDEV2.SciTEConfig
  • SciTEConfig/OldSciTE4AutoIt3.SciTEConfig
  • SciTEConfig/SciTE4AutoIt3.SciTEConfig
  • SciTEConfig/SciteConfig.au3
    .ps1
  • SciTEConfig/SciteConfig.exe
    .exe windows:5 windows x86 arch:x86

    04b4eec1b14791bf23f31173f27a5df0


    Headers

    Imports

    Sections

  • SciTEGlobal.properties
  • SciTEJump/HelpFile.chm
    .chm
  • SciTEJump/Languages/English.lng
  • SciTEJump/Languages/Finnish.lng
  • SciTEJump/Languages/French.lng
  • SciTEJump/Languages/German.lng
  • SciTEJump/Languages/LangChanges.txt
  • SciTEJump/Languages/Persian.lng
  • SciTEJump/Languages/Romanian.lng
  • SciTEJump/Languages/Russian.lng
  • SciTEJump/Languages/Translate.txt
  • SciTEJump/License.txt
  • SciTEJump/Readme.txt
  • SciTEJump/SciTE Jump.exe
    .exe windows:5 windows x86 arch:x86

    b70d88d505f1be09b47c5b77eecb3b45


    Headers

    Imports

    Sections

  • SciTEJump/Settings.ini
  • SciTEJump/Source/FunctionList_Example.txt
  • SciTEJump/Source/SciTE Jump.au3
    .ps1
  • Scite4AutoIt3.chm
    .chm
  • Tidy/Tidy.exe
    .exe windows:4 windows x86 arch:x86

    25b9fef0266216822d0c2e3670753904


    Headers

    Imports

    Sections

  • Tidy/TidyV2_Example.ini
  • Tidy/au3.api
  • api/$PROFILE/au3.UserUdfs.properties
  • api/au3.autoit3wrapper.api
  • api/iface.api
  • cSnippet/CSnippet.au3
    .ps1
  • cSnippet/CSnippet.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • cSnippet/filetype1.ico
  • cSnippet/includes/CommCtrl.au3
  • cSnippet/includes/Menus.au3
    .ps1
  • cSnippet/includes/WinAnimate.au3
  • cSnippet/includes/_XMLDomWrapper.au3
  • findstr.au3
    .ps1
  • findstr.exe
    .exe windows:5 windows x86 arch:x86

    870b8e75c7190e202e9c6c81dff1040c


    Headers

    Imports

    Sections

  • lua/AutoHScroll.lua
  • lua/AutoItAutoComplete.lua
  • lua/AutoItGotoDefinition.lua
  • lua/AutoItIndentFix.lua
  • lua/AutoItPixmap.lua
  • lua/AutoItTools.lua
  • lua/AutoItToolsUpd.lua
  • lua/Changes.txt
  • lua/Class.lua
    .js
  • lua/Common.lua
  • lua/EdgeMode.lua
  • lua/LoadSession.lua
  • lua/SciTEStartup.lua
  • lua/SciTE_extras.lua
  • lua/SmartAutoCompleteHide.lua
  • lua/Tools.lua
  • luaCOPYRIGHT
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp