Overview

overview

7

Static

static

7

17b6ac81d9...18.exe

windows7-x64

7

17b6ac81d9...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

AudioConvertor.exe

windows7-x64

5

AudioConvertor.exe

windows10-2004-x64

5

AudioDecode.dll

windows7-x64

3

AudioDecode.dll

windows10-2004-x64

3

AudioGrab.dll

windows7-x64

3

AudioGrab.dll

windows10-2004-x64

3

AudioSharer.dll

windows7-x64

3

AudioSharer.dll

windows10-2004-x64

3

Image.dll

windows7-x64

3

Image.dll

windows10-2004-x64

3

InsideGrab.dll

windows7-x64

3

InsideGrab.dll

windows10-2004-x64

3

OfflineRecorder.exe

windows7-x64

5

OfflineRecorder.exe

windows10-2004-x64

5

PGPlayer.exe

windows7-x64

3

PGPlayer.exe

windows10-2004-x64

3

PGStarter.exe

windows7-x64

3

PGStarter.exe

windows10-2004-x64

PlaybackUI.dll

windows7-x64

3

PlaybackUI.dll

windows10-2004-x64

3

Popups.dll

windows7-x64

3

Popups.dll

windows10-2004-x64

3

PowerGramo.exe

windows7-x64

3

PowerGramo.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    17b6ac81d904fdf6301db0009ea83c1f_JaffaCakes118

  • Size

    3.2MB

  • MD5

    17b6ac81d904fdf6301db0009ea83c1f

  • SHA1

    34e8de7c3d7d8fb40da418a3cdf280a1045b5bc1

  • SHA256

    36a9a8ddd93665c265785895cef1a90769c9aaac6879d5f5e636508670175b68

  • SHA512

    d8d32d13b5f8e15b33488b28adf5033e6413aac822ffe8e6b06f9e6cb365e6d4cd8c0c71a3fac11c7761d3365202689ce20bb4f7e8f75bd05a8d00990cfc2acc

  • SSDEEP

    49152:2NWGQ+UKjD4SBOmkz0W4pNKf/kpQ6qGWlQPwOyBx/9RnTqauzTj3FkRK2ymq:2QGYu3BOm9WXZlQPwRBxFRTqaSfVg1q

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 27 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 17b6ac81d904fdf6301db0009ea83c1f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • Audio/Recording aborted.wav
  • Audio/Recording disabled.wav
  • Audio/being recorded.wav
  • Audio/recording saved.wav
  • AudioConvertor.exe
    .exe windows:4 windows x86 arch:x86

    f70b896a2ed79bae0df4c538ca11d7f3


    Headers

    Imports

    Sections

  • AudioConvertor.exe.manifest
    .xml
  • AudioDecode.dll
    .dll windows:4 windows x86 arch:x86

    fc0bdd0bb75d493ff4a3d6be825f3f04


    Headers

    Imports

    Exports

    Sections

  • AudioGrab.dll
    .dll windows:4 windows x86 arch:x86

    8c2e07d04fe64b700a99b4b6b8f61cc8


    Headers

    Imports

    Exports

    Sections

  • AudioSharer.dll
    .dll windows:4 windows x86 arch:x86

    e933675e5df145f140eb61d5bf830908


    Headers

    Imports

    Exports

    Sections

  • Greetings/female.mp3
  • Greetings/male.mp3
  • Image.dll
    .dll windows:4 windows x86 arch:x86

    3a270af4bb4756f468fe9bc1962f02ed


    Headers

    Imports

    Exports

    Sections

  • InsideGrab.dll
    .dll windows:4 windows x86 arch:x86

    f22a70279800b0ba1502520596d793f7


    Headers

    Imports

    Exports

    Sections

  • OfflineRecorder.exe
    .exe windows:4 windows x86 arch:x86

    238b2b7e465e0cb8cf617157ebdd3dbd


    Headers

    Imports

    Sections

  • OfflineRecorder.exe.manifest
    .xml
  • PGPlayer.exe
    .exe windows:4 windows x86 arch:x86

    0d0559c38c1f7fd71454081dc774adec


    Headers

    Imports

    Sections

  • PGPlayer.exe.manifest
    .xml
  • PGStarter.exe
    .exe windows:4 windows x86 arch:x86

    0b53fb3a8333b86b060960317f29e4b6


    Headers

    Imports

    Sections

  • PlaybackUI.dll
    .dll windows:4 windows x86 arch:x86

    9332d775c1f21e0d5be5665fe987f44f


    Headers

    Imports

    Exports

    Sections

  • Popups.dll
    .dll windows:4 windows x86 arch:x86

    cdcbb5b6182fa059251e62b8358853bd


    Headers

    Imports

    Exports

    Sections

  • PowerGramo.exe
    .exe windows:4 windows x86 arch:x86

    4895e7feeb6ede8abee1f5860b2ce782


    Headers

    Imports

    Exports

    Sections

  • PowerGramo.exe.manifest
    .xml
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • UpGrade.exe
    .exe windows:4 windows x86 arch:x86

    0be79f4683f7224bb0f3dd575b2d0822


    Headers

    Imports

    Sections

  • Upgrade.exe.manifest
    .xml
  • VEDecoder.dll
    .dll windows:4 windows x86 arch:x86

    edba63fe09e03a3c7057b86881956948


    Headers

    Imports

    Exports

    Sections

  • VideoGrab.dll
    .dll windows:4 windows x86 arch:x86

    6e2c483b74e00dd550251cb701c322d8


    Headers

    Imports

    Exports

    Sections

  • mpeg_enc.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ogg_enc.dll
    .dll windows:4 windows x86 arch:x86

    cd64b74cc34bfd20d6d7494bf265c24a


    Headers

    Imports

    Exports

    Sections

  • wave_enc.dll
    .dll windows:4 windows x86 arch:x86

    cfbf40686fa35c21a8ac9682b762d997


    Headers

    Imports

    Exports

    Sections

  • wma_enc.dll
    .dll windows:4 windows x86 arch:x86

    97bcb408c67a15ec0b1236a5374f0ba3


    Headers

    Imports

    Exports

    Sections

  • zlib.dll
    .dll windows:4 windows x86 arch:x86

    ed3a677780097c2ca3551c0eac21858c


    Headers

    Imports

    Exports

    Sections