General

  • Target

    2b9635e62d7a4b23ccc910efd72cdd78_JaffaCakes118

  • Size

    2.5MB

  • MD5

    2b9635e62d7a4b23ccc910efd72cdd78

  • SHA1

    4c2b075dcc341845a4dfd36decb9147734783444

  • SHA256

    bcc2471173c2c5fb4953d707150cbdc58d72ff4ed9acf106819b48db50c0b23a

  • SHA512

    7af03a982a0584c0627bc9a9af164a7d8ef059a950366210cdb2452dd239677f1ba87412c3b6934677c9de7b16134cf1d1aca37d8e221e8b862484159ecc7225

  • SSDEEP

    49152:6NAPX3Dz86GyHY46hMWqLT6+AJgVOV2XPGZUlc65CYM0pApedgz3To:1nDz2MTfT4YXGB65CYMHpedKs

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 2b9635e62d7a4b23ccc910efd72cdd78_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    36276e7c12820586c6f4cfea7e3f74d2


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/DvCtl.dll
    .dll windows:4 windows x86 arch:x86

    6d96d1db3bdfa1bffe17712ca4bda0e8


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/HTLib.dll
    .dll windows:4 windows x86 arch:x86

    f965499b256c0b4e4ed001f6209a9d91


    Headers

    Imports

    Sections

  • $SYSDIR/MadCHook.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $SYSDIR/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/rns.dt_
    .exe windows:4 windows x86 arch:x86

    8e5faab9dfe658bec9adc98245878545


    Headers

    Imports

    Sections

  • $SYSDIR/rs.dt_
    .exe windows:4 windows x86 arch:x86

    771a04c101dc8e1d11c641dfad495676


    Headers

    Imports

    Sections

  • $SYSDIR/uld.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $SYSDIR/us32.dt_
    .exe windows:4 windows x86 arch:x86

    55175682cc2b2d246ec0ec54b83f1e7f


    Headers

    Imports

    Sections

  • $SYSDIR/xcl.dt_
    .exe windows:5 windows x86 arch:x86

    61b43c6bba7c7e8bea036e1228ef2969


    Headers

    Imports

    Sections

  • $WINDIR/Help/usb.txt
  • $WINDIR/TaskSchdule.exe
    .exe windows:4 windows x86 arch:x86

    ad587f7975205a678dbc187b589be175


    Headers

    Imports

    Sections

  • Font32.dll
    .exe windows:4 windows x86 arch:x86

    36276e7c12820586c6f4cfea7e3f74d2


    Headers

    Imports

    Sections

  • Notify.wav
  • USBClient.exe
    .exe windows:4 windows x86 arch:x86

    ef41920f74c1effd034020a87a3dc87c


    Headers

    Imports

    Sections

  • UnstClient.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • comcat32.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • euj32.dt_
    .exe windows:4 windows x86 arch:x86

    fb4ab69a560d20c548cbcb76d7218196


    Headers

    Imports

    Sections