General

  • Target

    159525ed7c289abff763e173f77d3f4e_JaffaCakes118

  • Size

    4.7MB

  • MD5

    159525ed7c289abff763e173f77d3f4e

  • SHA1

    7fb4a5c1ff1bb267be9c01959d5c09aa2cbdbd86

  • SHA256

    abbfad561d0dd8eb6762c3f928d32c79b9e1918df97fe1217ba3fe1d69bba0c8

  • SHA512

    a20f3d18b1d5ecdad1010852e125756a9a85bfa7fc734c8c89a47acd1d50bc55e06118f827df8f8bab238c7cc0910cf4ef27fa212829609a4d5fe26a22e6b347

  • SSDEEP

    98304:mFHZ9QeX2HHZMCB/8Q2lXjO1oWoFFp8aNBHAey9RKSR3v2lvk:mFUeX2nZMI8DjFWu8aNDcKSR3v/

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 8 IoCs

Files

  • 159525ed7c289abff763e173f77d3f4e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Banner.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Microsoft.VC90.CRT.manifest
  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bundle.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • 1.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    2274cc1534607459cdd304a928601ef9


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Mozilla Firefox/$R1
    .dll regsvr32 windows:5 windows x86 arch:x86

    341bad8922a073e579e7e509d32c4240


    Headers

    Imports

    Exports

    Sections

  • Ahmc_nap_amf_ahmc.exe
    .exe windows:1 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Amonetize.exe
    .exe windows:4 windows x86 arch:x86

    6746e9922b3ebc3d25ca9cc447fa9376


    Headers

    Imports

    Sections

  • AmonetizeAcPro.exe
    .exe windows:1 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $PLUGINSDIR/layout.html
    .html .js polyglot
  • $PLUGINSDIR/msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/tools.dll
    .dll windows:5 windows x86 arch:x86

    1b63fbcb3a1760b366862b3a44b1895b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/updater.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • FileHunter.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • updater.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections