General

  • Target

    057bf3961da3a2b67cf7d0049a6cb8f5_JaffaCakes118

  • Size

    1.1MB

  • MD5

    057bf3961da3a2b67cf7d0049a6cb8f5

  • SHA1

    ef8c49dacb5ebdd7b55730be0322de3c6c4c11d2

  • SHA256

    147d6c65d91ad46873fbf7a4c72300dfcc652f50c4b092df5d2fc896bc2d83df

  • SHA512

    719024fd28fdb3d43d51590f4d14c03339a6340d8d8b03bf9c4dc51cfa158bcbaf30fcb0becf5f2ae9c9daa21cbc6347b8c47af0d1d1e9ce939568bb8c29ea03

  • SSDEEP

    24576:LhfRPFnlUn9irK0rwBTotwkoCKTVAP62Iy12pWivdtqmD7J:NZp2n9Xpdk5QAPX9bivxD7J

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 057bf3961da3a2b67cf7d0049a6cb8f5_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/$_286_/ProxyInstaller.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/$_287_/BI.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/$_288_/DownloadAcc.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BunndleOfferManager.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    f5aee842c9c87c94e859ca5f4892d62d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DM_loader.gif
    .gif
  • $PLUGINSDIR/Failed.htm
    .js
  • $PLUGINSDIR/FirefoxHandler.dll
    .dll windows:5 windows x86 arch:x86

    0b0bd9a74b81c20dd1ca10dffb1e2ff5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OCSetupHlp.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    bcc9fc26368b3f6e1a5258f41bed8ac8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/execDos.dll
    .dll windows:5 windows x86 arch:x86

    a5d239ed12c9442d63c73cb9ff7cad0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/icon.png
    .png
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    917ae9b9adb269abd5543f5bf5676bac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/webapphost.dll
    .dll windows:5 windows x86 arch:x86

    70517b7257478154cb6e76d395f60480


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Code Sign

    Headers

    Imports

    Exports

    Sections