General

  • Target

    10c181b3d013718065c317f19fddbe4d_JaffaCakes118

  • Size

    1.9MB

  • MD5

    10c181b3d013718065c317f19fddbe4d

  • SHA1

    4b94d1f353064df0f4e131afed9e339933b7f315

  • SHA256

    840e606e0b8fca31106c28148c644aeaef66d9dd900595aecfdfd90e2df52038

  • SHA512

    501cd4586b21ecd6af2acf1ff7af1e4f9477be04cef2f217186b0e26943db57971f0c3b521f9d08651b34b4c9192212e68ae606f35a7ab5f7364f7f4fed18982

  • SSDEEP

    49152:Mv7aAiM0LdcvRNFqZmlxoTR8Hv8xRQJiO1:Mv4cZr9A5xRQJl

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 3 IoCs

    Detects file using ACProtect software.

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 10c181b3d013718065c317f19fddbe4d_JaffaCakes118
    .rar
  • ZSHE/HEAide.exe
    .exe windows:5 windows x86 arch:x86

    c31141dc44e6c3cdd014279dccadf26c


    Headers

    Imports

    Exports

    Sections

  • ZSHE/HEPlugin.dll
    .dll windows:5 windows x86 arch:x86

    de12bcd6d3788276690210f7c31f7b22


    Headers

    Imports

    Exports

    Sections

  • ZSHE/Microsoft.VC90.CRT.manifest
    .xml
  • ZSHE/Microsoft.VC90.MFC.manifest
    .xml
  • ZSHE/alert.wav
  • ZSHE/filelist.txt
  • ZSHE/mfc90u.dll
    .dll windows:5 windows x86 arch:x86

    814d9e5c82b805568941908a38d8a5f5


    Code Sign

    Headers

    Imports

    Sections

  • ZSHE/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ZSHE/update/libeay32.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ZSHE/update/md5.exe
    .exe windows:4 windows x86 arch:x86

    a440a8b83507b2f137d344cedae2c199


    Headers

    Imports

    Sections

  • ZSHE/update/msvcr80.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ZSHE/update/ssleay32.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ZSHE/update/wget.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ZSHE/使用說明_簡體.txt
  • ZSHE/使用說明_繁體.txt
  • ZSHE/更新_簡體.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ZSHE/更新_繁體.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections