General

  • Target

    05c6488f0b51d91f1c825e2d228c3857_JaffaCakes118

  • Size

    6.6MB

  • MD5

    05c6488f0b51d91f1c825e2d228c3857

  • SHA1

    3a409298d629b020dba6c3dd7913cdb1ad34a7cc

  • SHA256

    399a66a264facc46f2a703c9de786fcff6707f1fa4ca383b9a35b3fdd073cb7e

  • SHA512

    a787e2b8fe0dcb8471a7006f78fc304ccc6ea12f879f90d726be6a6fca75b68bc9e9c6159bb43516338ad463d1599d7f7078d39c9fb2b68d6473783504873c45

  • SSDEEP

    196608:szyQEbqDLv/b6b60eYXsFDQ60Ust4z4hp7WOGcA:szJDZUftG4n9A

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 25 IoCs

    Detects file using ACProtect software.

  • UPX packed file 26 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 33 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 05c6488f0b51d91f1c825e2d228c3857_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • LICENSE.txt
  • Microsoft.VC90.CRT.manifest
  • PIL._imaging.pyd
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • README.html
    .html
  • _hashlib.pyd
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • _socket.pyd
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • _ssl.pyd
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • bz2.pyd
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • help.html
    .html
  • msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • msvcp90.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • msvcr90.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • notewhal.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • notewhal.exe.manifest
    .xml
  • python27.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • pywintypes27.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • res/email.png
    .png
  • res/notify.wav
  • select.pyd
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • unicodedata.pyd
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • win32api.pyd
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • win32pipe.pyd
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wx._controls_.pyd
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wx._core_.pyd
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wx._gdi_.pyd
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wx._misc_.pyd
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wx._propgrid.pyd
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wx._windows_.pyd
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wxbase294u_net_vc90.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wxbase294u_vc90.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wxmsw294u_adv_vc90.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wxmsw294u_core_vc90.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wxmsw294u_html_vc90.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wxmsw294u_propgrid_vc90.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections