General

  • Target

    2fb4d3744fc57ab05a7dfc2b944dda38_JaffaCakes118

  • Size

    1.1MB

  • MD5

    2fb4d3744fc57ab05a7dfc2b944dda38

  • SHA1

    15b8666ecc922f34a3034a689eab04ef36490f90

  • SHA256

    76b069a609f6f48e976930bf495d663b8187098dd7bcca38a739ed963dd7403e

  • SHA512

    2b7fd88329638fc24a5a5899877fc3cb2dc8ff6f544e5d61a0583d7a40699629262ac3574c0d6f500ba29a22f80d7289778f48cad144db4aae17e4aa19dbc1d9

  • SSDEEP

    24576:8NyK00WoM0cIY/GMbFwG09XjZdLny3Ki1GeZVfO9Q/cE33Qum+eFu9BF4v:Ub00WniKOz9zXM1U9Q/cL+eg9BKv

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2fb4d3744fc57ab05a7dfc2b944dda38_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/$_286_/ProxyInstaller.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/$_287_/BI.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/$_288_/DownloadAcc.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BunndleOfferManager.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    f5aee842c9c87c94e859ca5f4892d62d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DM_loader.gif
    .gif
  • $PLUGINSDIR/Failed.htm
    .js
  • $PLUGINSDIR/FirefoxHandler.dll
    .dll windows:5 windows x86 arch:x86

    0b0bd9a74b81c20dd1ca10dffb1e2ff5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OCSetupHlp.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    bcc9fc26368b3f6e1a5258f41bed8ac8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/execDos.dll
    .dll windows:5 windows x86 arch:x86

    a5d239ed12c9442d63c73cb9ff7cad0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/icon.png
    .png
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    917ae9b9adb269abd5543f5bf5676bac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/webapphost.dll
    .dll windows:5 windows x86 arch:x86

    70517b7257478154cb6e76d395f60480


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Code Sign

    Headers

    Imports

    Exports

    Sections