General

  • Target

    06d4a88d1229a80ce3710af9cecb97fd_JaffaCakes118

  • Size

    11.3MB

  • MD5

    06d4a88d1229a80ce3710af9cecb97fd

  • SHA1

    f65460ca3ce31de30819d6be6f63146b7357054d

  • SHA256

    37310b004ef289d49f03db0dd5b50d66899ab4ff9ffc4ee1458d6fcb613d86e8

  • SHA512

    00fda95f308a8bedbe2a6813a4f2c7c9ca2c49005b02c248e9982012890a0251ae6722671b208513fdb6ccb3d1744775e1dd1989a032337e8e68efda296366f8

  • SSDEEP

    196608:2EPBTPeryMdaHQoSBqSiQ4fbzGh4g1KbGxyt4B2ifgrEhQPnudnIVjMKmYDZ:7P9PspeAJiQGyh4rKxytoEgWPTMKb1

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 06d4a88d1229a80ce3710af9cecb97fd_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/HWSignature.dll
    .dll windows:5 windows x86 arch:x86

    02a9058c889f86b891a63b683ab98a79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SetupLib.dll
    .dll windows:5 windows x86 arch:x86

    38dceb82fae7283ed5314e7a5a2dfc53


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SogouPY.ime
    .dll windows:5 windows x86 arch:x86

    f9d4e8d7efe9a59840db84dabedc0e17


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:5 windows x86 arch:x86

    b1d9539c7cfd95718179dedb471b482f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/install0.bmp
  • $PLUGINSDIR/install1.bmp
  • $PLUGINSDIR/install2.bmp
  • $PLUGINSDIR/install3.bmp
  • $PLUGINSDIR/install4.bmp
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/$R1
    .dll windows:5 windows x86 arch:x86

    f9d4e8d7efe9a59840db84dabedc0e17


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/SogouPY.ime
    .dll windows:5 windows x86 arch:x86

    f9d4e8d7efe9a59840db84dabedc0e17


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/SogouPY.ime~
    .dll windows:5 windows x86 arch:x86

    f9d4e8d7efe9a59840db84dabedc0e17


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/SogouPy.ime
    .dll windows:5 windows x86 arch:x86

    f9d4e8d7efe9a59840db84dabedc0e17


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/ExtensionManager.exe
    .exe windows:5 windows x86 arch:x86

    d8f48afe9d9afe29e630c4fc8c2c2ba4


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/HWSignature.dll
    .dll windows:5 windows x86 arch:x86

    02a9058c889f86b891a63b683ab98a79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/ZipLib.dll
    .dll windows:5 windows x86 arch:x86

    3a66351d63cefec54e84e7d49764aa2e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 5.2.0.5374/HWSignature.dll
    .dll windows:5 windows x86 arch:x86

    02a9058c889f86b891a63b683ab98a79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 5.2.0.5374/ImeUtil.exe
    .exe windows:5 windows x86 arch:x86

    f07b4b3f0c8390daa0c87f965ecc2081


    Code Sign

    Headers

    Imports

    Sections

  • 5.2.0.5374/PinyinUp.exe
    .exe windows:5 windows x86 arch:x86

    77196bb87cd27d8973fcde5acca98117


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 5.2.0.5374/QuickInput.exe
    .exe windows:5 windows x86 arch:x86

    7b91fec81ef793f14f7d86c067b8a25c


    Code Sign

    Headers

    Imports

    Sections

  • 5.2.0.5374/Resource.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 5.2.0.5374/SGTool.exe
    .exe windows:5 windows x86 arch:x86

    e78a76c32cd6e817afcdc43a7639b442


    Code Sign

    Headers

    Imports

    Sections

  • 5.2.0.5374/ScdMaker.exe
    .exe windows:5 windows x86 arch:x86

    67dfc563e4f7d0c4f43771deafae0c43


    Code Sign

    Headers

    Imports

    Sections

  • 5.2.0.5374/ScdReg.exe
    .exe windows:5 windows x86 arch:x86

    a842bc6f9b8786704a29538f64a80fff


    Code Sign

    Headers

    Imports

    Sections

  • 5.2.0.5374/SeFastInstall.exe
    .exe windows:4 windows x86 arch:x86

    c0d57ecc800f41ae26efe3c6fdf09a55


    Code Sign

    Headers

    Imports

    Sections

  • 5.2.0.5374/SkinReg.exe
    .exe windows:5 windows x86 arch:x86

    e3230c6c8709cf5ac30d94d77c75b70d


    Code Sign

    Headers

    Imports

    Sections

  • 5.2.0.5374/SogouCloud.exe
    .exe windows:5 windows x86 arch:x86

    34b2a3cc38fe315dbb33b7f5c8d27d80


    Code Sign

    Headers

    Imports

    Sections

  • 5.2.0.5374/SogouTSF.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    e17e7d48a2766708ae271ae8943badf6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 5.2.0.5374/UserPage.exe
    .exe windows:5 windows x86 arch:x86

    a9894b65c66ecf6fddc8a4551b659af3


    Code Sign

    Headers

    Imports

    Sections

  • 5.2.0.5374/ZipLib.dll
    .dll windows:5 windows x86 arch:x86

    3a66351d63cefec54e84e7d49764aa2e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 5.2.0.5374/ZipLib64.dll
    .dll windows:5 windows x64 arch:x64

    f5a5d1a4c00c70e0643a04f3887fbffb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 5.2.0.5374/config.exe
    .exe windows:5 windows x86 arch:x86

    b358a780885213866b662f6078afa44b


    Code Sign

    Headers

    Imports

    Sections

  • 5.2.0.5374/crashrpt.exe
    .exe windows:4 windows x86 arch:x86

    9f38f2de4b5d67cc87c34c984b4c2485


    Code Sign

    Headers

    Imports

    Sections

  • 5.2.0.5374/install64.exe
    .exe windows:5 windows x64 arch:x64

    e6a9f4b2ee4fdafd8599a669ae7433b8


    Code Sign

    Headers

    Imports

    Sections

  • 5.2.0.5374/sgim_annex.bin
  • 5.2.0.5374/sgutil.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • 5.2.0.5374/sogoupinyintray.exe
    .exe windows:5 windows x86 arch:x86

    26ed2e28378fe2de2d08be17e9e74bae


    Code Sign

    Headers

    Imports

    Sections

  • 5.2.0.5374/sysmodel.bin
  • 5.2.0.5374/userNetSchedule.exe
    .exe windows:5 windows x86 arch:x86

    7274c8e660c0bb3846718eb19cf46a17


    Code Sign

    Headers

    Imports

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections