General

  • Target

    11e06da0fc9053ea72468d061ba9da19_JaffaCakes118

  • Size

    3.5MB

  • MD5

    11e06da0fc9053ea72468d061ba9da19

  • SHA1

    14f9c69ec191a76e125c24373d37189b1c763bb2

  • SHA256

    b0563887295d2289c96e4cf918ca8e0c7ac08d3f4debd8e22d3c044b2403d9a2

  • SHA512

    3af4d5a6b6a9b3edbd5e2cbb20333c31c2b9488759d88b40a8aa4dff07fe3861ba7a3b7545508c1a4f3f5b7969dad7f0f418b491c440a977420587c16ce185ef

  • SSDEEP

    98304:I+ySfay0wSKgQq9H8ty4lBQXUBcrBurtZgqZGt2IxH+AgEyk:IhsqYq9cL4UBMBatjFOyk

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

Files

  • 11e06da0fc9053ea72468d061ba9da19_JaffaCakes118
    .rar
  • VVT/VVisit.exe
    .exe windows:5 windows x86 arch:x86

    9ef62361d8a987832212bec7f58c79e1


    Headers

    Imports

    Sections

  • VVT/appface.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VVT/browser/AccessibleMarshal.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    92ccef2cdf4306b29fb3f75240fa8f56


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/IA2Marshal.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    46ba4ffb8903c630488fb3961a188799


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/appdata/compatibility.ini
  • VVT/browser/appdata/extensions.ini
  • VVT/browser/appdata/signons3.txt
  • VVT/browser/application.ini
  • VVT/browser/components/browserdirprovider.dll
    .dll windows:5 windows x86 arch:x86

    37d428fadb0e45ff5992b755bb875fa3


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/components/brwsrcmp.dll
    .dll windows:5 windows x86 arch:x86

    f2dfb0f98ccc97ca7e435ec22fa8c557


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/defaults/profile/bookmarks.html
  • VVT/browser/firefox.exe
    .exe windows:5 windows x86 arch:x86

    d66b0c69244042e23c1e4224546de1cb


    Headers

    Imports

    Sections

  • VVT/browser/freebl3.dll
    .dll windows:5 windows x86 arch:x86

    8f9e467b02484336444d182d97d5c6a6


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/js3250.dll
    .dll windows:5 windows x86 arch:x86

    d05121b669aa457b1ad262ef7a53e1bc


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VVT/browser/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VVT/browser/nspr4.dll
    .dll windows:5 windows x86 arch:x86

    e6485e26fab5b59071c55a4f528a7ca7


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/nss3.dll
    .dll windows:5 windows x86 arch:x86

    619d680d4138e152b0a7759f5e58e7f2


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/nssckbi.dll
    .dll windows:5 windows x86 arch:x86

    07d55f1cc07b94a0272d26282af66b56


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/nssdbm3.dll
    .dll windows:5 windows x86 arch:x86

    afc59122bd25cdbe80f00088ea6013a6


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/nssutil3.dll
    .dll windows:5 windows x86 arch:x86

    c325537091ab5a68d250ff0b239b697a


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/platform.ini
  • VVT/browser/plc4.dll
    .dll windows:5 windows x86 arch:x86

    ed34896d023ebecd1611eecfb70c835f


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/plds4.dll
    .dll windows:5 windows x86 arch:x86

    911c0f542103f8dffb47c759e9d17331


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/pxy/config.txt
  • VVT/browser/pxy/mgwz.dll
    .dll windows:4 windows x86 arch:x86

    6e0d411d3fcca5990423266db759d223


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/pxy/privoxy.dll
    .dll windows:4 windows x86 arch:x86

    a82f0c0ebe06cbc9d3b1e00c0f778cd0


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/res/hiddenWindow.html
    .html
  • VVT/browser/smime3.dll
    .dll windows:5 windows x86 arch:x86

    28692bfeaf0c95f050bd825dc10ad6d6


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/softokn3.dll
    .dll windows:5 windows x86 arch:x86

    bd50d68e9ef0e494da0943fbcc93701c


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/sqlite3.dll
    .dll windows:5 windows x86 arch:x86

    21ce12bd0864b549db9334ed9c94017a


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/ssl3.dll
    .dll windows:5 windows x86 arch:x86

    a0d5a2a4644891eebe4573b3f1ab2a1f


    Headers

    Imports

    Exports

    Sections

  • VVT/browser/xpcom.dll
    .dll windows:5 windows x86 arch:x86

    bc6e58103e11a1696a73fea93ce862d2


    Headers

    Imports

    Exports

    Sections

  • VVT/使用说明.txt