General

  • Target

    05780188ce004247a8c9cab6907cc0be_JaffaCakes118

  • Size

    4.5MB

  • MD5

    05780188ce004247a8c9cab6907cc0be

  • SHA1

    0f36d1728a3d0f7c71b37a697b64104a525d4794

  • SHA256

    bb86d29017b1ab54cc29ac0258826e28bf42518220dfb4141bc3e53e8f5bac7c

  • SHA512

    50729acc814cad66561b68a2621f4eb2b09bcbdf58e2a882de71ef075a188dcccf55ac59e128714c6b81edd5578edcdb96079b184de4cbc18c3ed9648a669dbf

  • SSDEEP

    98304:dxDwMjXgyv30CcHVyveQ1b4WcEJAIJIccM2xqXoOqsvuxflBnpo:X1v0CWVydJcEJACIk1uRvn6

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 3 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 05780188ce004247a8c9cab6907cc0be_JaffaCakes118
    .rar
  • EPIM Synchronizer.rar
    .rar
  • EPIM Synch keygen.exe
    .exe windows:4 windows x86 arch:x86

    87bed5a7cba00c7e1f4015f1bdae2183


    Headers

    Imports

    Sections

  • EPIMSync.exe
    .exe windows:4 windows x86 arch:x86

    dc072b97ab69d9cf474e33b457c157dd


    Code Sign

    Headers

    Imports

    Sections

  • epimsync3.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • EPIMSync.chm
    .chm
  • EPIMSync.exe
    .exe windows:4 windows x86 arch:x86

    dc072b97ab69d9cf474e33b457c157dd


    Code Sign

    Headers

    Imports

    Sections

  • Gds32.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Languages/Belarusian.lng
  • Languages/Bulgarian.lng
  • Languages/Catalan.lng
  • Languages/Chinese_Simpl.lng
  • Languages/Chinese_Trad.lng
  • Languages/Czech.lng
  • Languages/Danish.lng
  • Languages/Dutch.lng
  • Languages/English.lng
  • Languages/Estonian.lng
  • Languages/Finnish.lng
  • Languages/French.lng
  • Languages/Galician.lng
  • Languages/German.lng
  • Languages/Hebrew.lng
  • Languages/Hungarian.lng
  • Languages/Indonesian.lng
  • Languages/Italian.lng
  • Languages/Japanese.lng
  • Languages/Norwegian.lng
  • Languages/Polish.lng
  • Languages/PortugueseBR.lng
  • Languages/Romanian.lng
  • Languages/Russian.lng
  • Languages/Serbian.lng
  • Languages/Slovak.lng
  • Languages/Slovenian.lng
  • Languages/Spanish.lng
  • Languages/Swedish.lng
  • Languages/Turkish.lng
  • Languages/Ukrainian.lng
  • icudt30.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • icuuc30.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • uninstall.exe.nsis