General

  • Target

    12b62a85e93358d78bd17b27906f80ce_JaffaCakes118

  • Size

    585KB

  • MD5

    12b62a85e93358d78bd17b27906f80ce

  • SHA1

    e52f7082a4bbe1987c85d887c4105c1529146528

  • SHA256

    dac0c60648628c9515b9c4e5b491c7be3c7ec7ed7de2d078346bc3efbc299a27

  • SHA512

    ed1dd3ea07622225042c4983f4da8b363f315c2b4dedeb5072b55f40867cc50d8c4581fe4ecfb55c3247d8d84db8677825ea008f40c991b3be367f916215211b

  • SSDEEP

    12288:Knu2Hvd8jVv9DgNTF2pPYyVJqi0vv7NFJh2bx3rCzpSH55:hYd8pxgnzYF0bNrA93r9H5

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 12b62a85e93358d78bd17b27906f80ce_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:5 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/License_DE.rtf
    .rtf
  • $PLUGINSDIR/License_EN.rtf
    .rtf
  • $PLUGINSDIR/License_ES.rtf
    .rtf
  • $PLUGINSDIR/License_FR.rtf
    .rtf
  • $PLUGINSDIR/License_IT.rtf
    .rtf
  • $PLUGINSDIR/License_NL.rtf
    .rtf
  • $PLUGINSDIR/License_PT.rtf
    .rtf
  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ThreadTimer.dll
    .dll windows:5 windows x86 arch:x86

    cd7699c6e9370d6d4c4bcc96b7286a04


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TkInetc.dll
    .dll windows:6 windows x86 arch:x86

    e963599f352f9ccccdef45b7dd338c91


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TkNsweb.dll
    .dll windows:6 windows x86 arch:x86

    0d00b915273c786c7050422fa4b6ee7a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Tuto4PC_es.bmp
  • $PLUGINSDIR/Tuto4PC_fr.bmp
  • $PLUGINSDIR/Tuto4PC_it.bmp
  • $PLUGINSDIR/freesofttoday_es.bmp
  • $PLUGINSDIR/freesofttoday_fr.bmp
  • $PLUGINSDIR/freesofttoday_it.bmp
  • $PLUGINSDIR/freesofttoday_pt.bmp
  • $PLUGINSDIR/headerleft.bmp
  • $PLUGINSDIR/iminent_non_search_big.bmp
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    bd6ec5720e47defd9ca15646962b5f17


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsURL.dll
    .dll windows:6 windows x86 arch:x86

    97e70b971b35cb67da23cbde6a181f80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/snapdo_terms.rtf
    .rtf
  • $PLUGINSDIR/utils.dll
    .dll windows:4 windows x86 arch:x86

    2695a5acfdb825d3ded9c7c7bba7fb7f


    Headers

    Imports

    Exports

    Sections