Overview

overview

7

Static

static

7

2a60e300c9...18.exe

windows7-x64

3

2a60e300c9...18.exe

windows10-2004-x64

3

$PLUGINSDI...64.dll

windows7-x64

3

$PLUGINSDI...64.dll

windows10-2004-x64

3

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

HtmlView.dll

windows7-x64

3

HtmlView.dll

windows10-2004-x64

3

MCI_CMD.dll

windows7-x64

5

MCI_CMD.dll

windows10-2004-x64

5

downlib.dll

windows7-x64

3

downlib.dll

windows10-2004-x64

3

dp1.dll

windows7-x64

3

dp1.dll

windows10-2004-x64

3

eMMedia.dll

windows7-x64

3

eMMedia.dll

windows10-2004-x64

3

help.htm

windows7-x64

3

help.htm

windows10-2004-x64

3

iext.dll

windows7-x64

3

iext.dll

windows10-2004-x64

3

iext.dll

windows7-x64

3

iext.dll

windows10-2004-x64

3

iext2.dll

windows7-x64

3

iext2.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a60e300c9758386b222b91120a89096_JaffaCakes118

  • Size

    2.1MB

  • MD5

    2a60e300c9758386b222b91120a89096

  • SHA1

    9cde4149f5b2f494ca4df2d5169b256f91874e04

  • SHA256

    b7cea878ee64815a8c929cc47d75631503b78359c129975e43dcef5969607408

  • SHA512

    1fd626a79278440919198201a4fe38f4013b83717e0cd509f20688d35df7f571254ce8b9a419add79f79c2d16f504c41374e259761b0a7e6b98cd58cb51fab7f

  • SSDEEP

    49152:qxRqQY5hW5UsUvrXhAEAXL2VbTY5hgoDkCGl8ZCXB1YKg7O2S1:qxRqdWavjE2Vbc5mzzQsB1YKsY

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 2a60e300c9758386b222b91120a89096_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    1ba6926a1ee4e4cda118768081f528d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/blowfish.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • 1.gif
  • 11.gif
  • 111.skn
  • 2.gif
  • 22.gif
  • 3.gif
  • 33.gif
  • 4.gif
  • 44.gif
  • 5.gif
  • 55.gif
  • 6.gif
  • 66.gif
  • 7.gif
  • 8.gif
  • 91.gif
  • HtmlView.fne
    .dll windows:4 windows x86 arch:x86

    7a1f3f7ebb7f027393fa36fd3eaa9c10


    Headers

    Imports

    Exports

    Sections

  • MCI_CMD.fne
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Readme.txt
  • downlib.fne
    .dll windows:4 windows x86 arch:x86

    12dde7696e64c5ce1b3185f302d5aba4


    Headers

    Imports

    Exports

    Sections

  • dp1.fne
    .dll windows:4 windows x86 arch:x86

    a198616942b79e67d7da4241ca14ebce


    Headers

    Imports

    Exports

    Sections

  • eMMedia.fne
    .dll regsvr32 windows:4 windows x86 arch:x86

    213df7f2cb71a3ab004de868df9fd83c


    Headers

    Imports

    Exports

    Sections

  • help.htm
    .html
  • iext.fne
    .dll windows:4 windows x86 arch:x86

    db0eb3308075cb0cbe09b59156a60f56


    Headers

    Imports

    Exports

    Sections

  • iext.fnr
    .dll windows:4 windows x86 arch:x86

    f86e54dbf86fab2a0484cdc838c093a0


    Headers

    Imports

    Exports

    Sections

  • iext2.fne
    .dll windows:4 windows x86 arch:x86

    81dd4db2e5035e56760e427892909d35


    Headers

    Imports

    Exports

    Sections

  • iext3.fne
    .dll windows:4 windows x86 arch:x86

    e16cd9ed3233064536d99cf6794183fb


    Headers

    Imports

    Exports

    Sections

  • iext6.fne
    .dll windows:4 windows x86 arch:x86

    c5686fc51963c20b905863834edcd7e5


    Headers

    Imports

    Exports

    Sections

  • krnln.fnr
    .dll windows:4 windows x86 arch:x86

    1b0da3e29e53b02ba3878395bf7338f6


    Headers

    Imports

    Exports

    Sections

  • setup.dll
    .dll windows:4 windows x86 arch:x86

    b7ff43eb98df5cc15128929de913996e


    Headers

    Imports

    Exports

    Sections

  • setup.ini
  • shell.fne
    .dll windows:4 windows x86 arch:x86

    5c5d113b6e7adb5168ea190de24145c0


    Headers

    Imports

    Exports

    Sections

  • updata.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • xwx.fne
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • .exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • .exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • .INI
  • .txt
  • ͯ/ҹ.mp3