General

  • Target

    304db2b74a300f9b28ac3573e7a98fc5_JaffaCakes118

  • Size

    1.5MB

  • MD5

    304db2b74a300f9b28ac3573e7a98fc5

  • SHA1

    eb62a3cdb4eeb09361f96399a1f2bc0d1beebcbc

  • SHA256

    d281791655e28502b2485f3a753ddef36bd963552db550fa6e481faf0186862e

  • SHA512

    a7aad83b71d6c5755eba1baf400a8ebcdca28a772c404b511fdb286299d6a0b03b1e0802bc94f144887fa2b48943becb07824c9a8da640509b7c14cef060ac3c

  • SSDEEP

    49152:MtKupe79MyZRsT/2ogBxtL5mErMWFqGP+OdO:L8e2yZO/x2x5kEN3+B

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 304db2b74a300f9b28ac3573e7a98fc5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/MakeDll.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRandom.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    cd53277eaa7bbb8fb5b2b678274dcb4e


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/game.ico
  • $SYSDIR/taobao.ico
  • $_54_/$_52_
    .exe windows:4 windows x86 arch:x86

    bb85e70bb9ca123a192fb362d332c9e0


    Code Sign

    Headers

    Imports

    Sections

  • $_54_/Engine.dll
    .dll windows:5 windows x86 arch:x86

    739c189022f322123ec1d0668c6be67f


    Headers

    Imports

    Sections

  • $_55_/$_53_
    .dll windows:5 windows x86 arch:x86

    2bd11fd121cb365022227d6bf1f54d0d


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • oem.ini
  • ֮.exe
    .exe windows:4 windows x86 arch:x86

    529e31f77e52cbf0a3f800a64416df7b


    Code Sign

    Headers

    Imports

    Sections

  • ֮.ini