General

  • Target

    0ea45bacde651ddc6cec9ef9d50c7ef1_JaffaCakes118

  • Size

    5.4MB

  • MD5

    0ea45bacde651ddc6cec9ef9d50c7ef1

  • SHA1

    35bceadc396d4774df0547633cc30f6ba4199199

  • SHA256

    404e13354d16b9f3a0a22150588ddf330f91c58ba4b896f70cbb611b5f1994bc

  • SHA512

    2dfd2fcde260bf5e7454a484140a9aef5c07bfe1808813b429d1c43a78709f0c0e0f5c44874c4e1047015783c42177809b9554795729964a6dd7c1e12b458d03

  • SSDEEP

    98304:U1k8VO82XHfzqEKn7QSNak6VyhDLYnWO2XJ4tpx69BIMYMqjO97vbNnLlt:G2XHfOEKsniMn92Xitpx6DzYMSCvbNh

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs

Files

  • 0ea45bacde651ddc6cec9ef9d50c7ef1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallerStuff.dll
    .dll windows:6 windows x86 arch:x86

    b07f91f7e65b795fb4d8e7b2673e3928


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OCSetupHlp.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    93bd1585ffbc730c763e71e0c6c896b3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsJSON.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/setup_cr.exe
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallerUtils.dll
    .dll windows:5 windows x86 arch:x86

    bd93dafddad5d317991cd88e0498a778


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Ivqyxeeikmjuu.tmp
  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    6aa1fb50f909cdf4bea3d3523348e900


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/welcome.bmp
  • DownLite.exe
    .exe windows:5 windows x86 arch:x86

    012d17dcdd80c23d701dd02dd2d9fce5


    Headers

    Imports

    Sections

  • uninstall.exe.nsis