General

  • Target

    00e5b4601a0c4f91094f3aef20bb4745_JaffaCakes118

  • Size

    443KB

  • MD5

    00e5b4601a0c4f91094f3aef20bb4745

  • SHA1

    93cc6223051fa8a469073cfeb0326c98bae631fd

  • SHA256

    d9d8f12cbcd08caf765aa48f5e9390c569cf65a156fe66066e5864e5a1d39000

  • SHA512

    8d9838ef8df36aa4ecbd770d9cd6719e24bf85e6e641dc54f0efd9ef2d41c74a9cc81ab30a4fad5a179c44b73370debaccf39b50f8e18668875451232cc8f41e

  • SSDEEP

    6144:be34f2CNdszp8V0bOgIuxDvESUd8BUcVCUoROcdSHxQjizlnEwUhIj7A8oc4Wf:V3up8mOzEEpd8jV2ROc9S+hIY8ocX

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 00e5b4601a0c4f91094f3aef20bb4745_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:5 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Metainstallerlicense_DE.txt
  • $PLUGINSDIR/Metainstallerlicense_EN.txt
  • $PLUGINSDIR/Metainstallerlicense_ES.txt
  • $PLUGINSDIR/Metainstallerlicense_FR.txt
  • $PLUGINSDIR/Metainstallerlicense_IT.txt
  • $PLUGINSDIR/Metainstallerlicense_NL.txt
  • $PLUGINSDIR/Metainstallerlicense_PT.txt
  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SPLogo.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/babylon.bmp
  • $PLUGINSDIR/headerleft.bmp
  • $PLUGINSDIR/iminent.bmp
  • $PLUGINSDIR/iminentv2_terms.rtf
    .rtf
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    bd6ec5720e47defd9ca15646962b5f17


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRichEdit.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/playbrite.bmp
  • $PLUGINSDIR/tbpacks.bmp
  • $PLUGINSDIR/utils.dll
    .dll windows:4 windows x86 arch:x86

    2695a5acfdb825d3ded9c7c7bba7fb7f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/yahoo.bmp