General

  • Target

    09fedd58bdc3b04793c37a4780faacd1_JaffaCakes118

  • Size

    7.8MB

  • MD5

    09fedd58bdc3b04793c37a4780faacd1

  • SHA1

    4779d0b59845ce42c9f9fb90d64997e5bf33b437

  • SHA256

    033741185e995343ff198919c1eb8602f1f4c925fb4052f13e5ca6f598672ca5

  • SHA512

    7f6f0af8aa916abeccd09747c929397adc7bbb21995e8504610518e569f37072f337a116290263d5301d9bf28b65572a6f616be71b0f15cebc1023c8ff28f3fe

  • SSDEEP

    98304:eO8zr5MpgBbXCIsGo5o7u5+XfpnOx+eA8M8QSGT4keUA31kh1rkwc8TwzsFfyezX:eb5/booyQAtA0GTleUAIrkOfKhV2LxW6

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • 09fedd58bdc3b04793c37a4780faacd1_JaffaCakes118
    .rar
  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/BENIOKU.txt
  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/HeraklesMT2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/KernelBase.dll
    .dll windows:6 windows x86 arch:x86

    9546109cd69307bec3e0b0502137da71


    Headers

    Imports

    Exports

    Sections

  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/MSS32.DLL
    .dll windows:4 windows x86 arch:x86

    1b2a3736acbf394c9ae08b2808ea97fd


    Headers

    Imports

    Exports

    Sections

  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/Pack/atack.eix
  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/Pack/atack.epk
  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/Pack/binek.eix
  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/granny2.dll
    .dll windows:4 windows x86 arch:x86

    c24d63a8e29b6bf4b4ae5f7a916ffb8f


    Headers

    Imports

    Exports

    Sections

  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/hid.dll
    .dll windows:6 windows x64 arch:x64

    0a90384377303e2a2625725018566a89


    Headers

    Imports

    Exports

    Sections

  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/ijl15.dll
    .dll windows:4 windows x86 arch:x86

    43fd8fd13d2d05654de14de52b9d512d


    Headers

    Imports

    Exports

    Sections

  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/ilu.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/imagehlp.dll
    .dll windows:6 windows x86 arch:x86

    ff9d42a8e93a03c19a4ef3473fac5b51


    Headers

    Imports

    Exports

    Sections

  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/imm32.dll
    .dll windows:6 windows x86 arch:x86

    2d60c5f51ec949750065eaca21281d82


    Headers

    Imports

    Exports

    Sections

  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/kernel32.dll
    .dll windows:6 windows x86 arch:x86

    40e5dbc11a97d0f42fdb08586deb586e


    Headers

    Imports

    Exports

    Sections

  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    ee7ad704683e073e720b423bc29bf9c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/msvcp120d.dll
    .dll windows:6 windows x86 arch:x86

    12f60a145117af3c0f2e4162d91a2437


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/msvcr100.dll
    .dll windows:5 windows x64 arch:x64

    1208bcdc77cffee6a6813646321cfc79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    9a3f45ddbfdd2bd6295b6856e85f2727


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/msvcr120d.dll
    .dll windows:6 windows x86 arch:x86

    62246df8cab9be5198cd77b173e00be6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/ole32.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    7016bf747e0b00620f3fac9155da41f7


    Headers

    Imports

    Exports

    Sections