General

  • Target

    38a7e42ce0ccf4c91675341be45554df_JaffaCakes118

  • Size

    6.0MB

  • MD5

    38a7e42ce0ccf4c91675341be45554df

  • SHA1

    a3f5178836c482287fd34d13f9c0d3f3271b908f

  • SHA256

    05ae491066d764f782fb5abd57c5ca65424a5cc19450c139cb850a29ad4e160e

  • SHA512

    5717aae1a6a5858032adde1aa8e8092e31e2c1da5d3f28eaf2629c4de3048eb0f66d5ed3dc7d40681783dd70d7bb7a7dd8c4f1c6adc86f2b6fd4487d2f177428

  • SSDEEP

    98304:PdHAq3a+3JEGTsqZiNfdIuh3yg49fZbRHKUgzSJpY35BGXDyL7aj5zDupjkZztE+:iq3j3Jj5iNfdIo3yg49ftRrgenY35BGP

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 51 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 38a7e42ce0ccf4c91675341be45554df_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • Ads.xml
  • Apply.exe
    .exe windows:5 windows x86 arch:x86

    0b1774cb051ef877e6a935fdc476b44d


    Code Sign

    Headers

    Imports

    Sections

  • Baidu-TB-ASBar.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/Baidu/ASBarBroker.exe
    .exe windows:4 windows x86 arch:x86

    8cb73f23fc4ffce04345bba981c347fe


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/Baidu/AddressBar.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e71d3b3585dc814a5bc5b07f78ba06d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Baidu/Toolbar/BaiduBarX_Tmp/BaiduBarX.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    886543cb05622fe2602926a61bff5e3a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Baidu/Toolbar/BaiduBarX_Tmp/BarBroker.exe
    .exe windows:4 windows x86 arch:x86

    6223fe4bfb126e3750ccd92127592502


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/Baidu/Toolbar/BaiduBarX_Tmp/rc.dll
    .dll windows:4 windows x86 arch:x86

    d811d71710ad58776155b7a8da1fa9db


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/Baidu/conf.xml
    .xml
  • Codecs/AviSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    ac58e9013e67b1b5c058c679eaf4705e


    Headers

    Imports

    Exports

    Sections

  • Codecs/CoreAAC.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    603a5553c41f87f262cc1e933305d724


    Headers

    Imports

    Exports

    Sections

  • Codecs/CoreAVC.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    a51dab6f4a70c7f5108331c3fee35df0


    Headers

    Imports

    Exports

    Sections

  • Codecs/FLVSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    13b38008f29a68c6bb241588064cba76


    Headers

    Imports

    Exports

    Sections

  • Codecs/Haali/Haalisplitter.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    414ec1bc0de0d85027929ca19e0d6be5


    Headers

    Imports

    Exports

    Sections

  • Codecs/Haali/avi.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    137c2204050ee4bb5202bad653832958


    Headers

    Imports

    Exports

    Sections

  • Codecs/Haali/mkunicode.dll
    .dll windows:5 windows x86 arch:x86

    1da5d5aea5082cc09bfa84c92764c4f2


    Headers

    Imports

    Exports

    Sections

  • Codecs/Haali/mkzlib.dll
    .dll windows:5 windows x86 arch:x86

    efcc761811aa76f93e9c981878270d69


    Headers

    Imports

    Exports

    Sections

  • Codecs/Haali/mp4.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    3f440f513153ae823175c3bf5cd0945f


    Headers

    Imports

    Exports

    Sections

  • Codecs/MP4Splitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    4b784aa0fac445ef5286027831723d8f


    Headers

    Imports

    Exports

    Sections

  • Codecs/MatroskaSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    6660c7bfdbe99d93f987b3ad0317ecd0


    Headers

    Imports

    Exports

    Sections

  • Codecs/Mpeg2DecFilter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    029aa0567041e2df739512c3ffc45bc2


    Headers

    Imports

    Exports

    Sections

  • Codecs/MpegSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    99af4973553a983ed31d4609e150db87


    Headers

    Imports

    Exports

    Sections

  • Codecs/OptimFROG.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Codecs/QMVSplitterFilter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    fae4664718acf6c82b1ba1e3f4c5bc91


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Codecs/QvodMpeg2Dec.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    e51373108e9dafd166529202b2a42f1a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Codecs/QvodPNGDecoder.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    d22da7f4a6067d239a27bf6d1ab6c4ca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Codecs/QvodPostVideo.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    702f9ab3a07e21e2ea4b36e73b37c251


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Codecs/QvodSound.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    090950ca5346bf812a01e2b7f9d98c14


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Codecs/QvodSource.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0a5a3f6642c2905b11a3b0a35ae3428a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Codecs/QvodSubtitle.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    be26fc307fd190c63ad8ae8dce79f9c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Codecs/RadGtSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    889412c92af0f151765011fc0824804f


    Headers

    Imports

    Exports

    Sections

  • Codecs/RealMediaSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    0118ec82690ef9a34fddc0a88d4114f8


    Headers

    Imports

    Exports

    Sections

  • Codecs/VP8DecFilter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    317d2ae15472ba95f4dc866e6c9f8b74


    Headers

    Imports

    Exports

    Sections

  • Codecs/VSFilter.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b73349842f85c74c408b362d73212703


    Headers

    Imports

    Exports

    Sections

  • Codecs/asfsplliter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    61540ae4d5f1fe29babe6b430f77a241


    Headers

    Imports

    Exports

    Sections

  • Codecs/bass_fsalac.dll
    .dll windows:5 windows x86 arch:x86

    80bb83a4a61546010afae7efe5e60489


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Codecs/binkw32.dll
    .dll windows:4 windows x86 arch:x86

    863844ad7aa759748e31329c65f10f35


    Headers

    Imports

    Exports

    Sections

  • Codecs/dsfVorbisDecoder.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    7cd1d34b27471c3acc17e36af78a59c8


    Headers

    Imports

    Exports

    Sections

  • Codecs/ir41_32.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    1927d0db3b7884104ff5f0a44713b4b2


    Headers

    Imports

    Exports

    Sections

  • Codecs/mmflvmux.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    25aa678a22a9c450874bd35c93db3435


    Headers

    Imports

    Exports

    Sections

  • Codecs/mmx264.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    d3e7b5cc057915e01866a3e529014a8e


    Headers

    Imports

    Exports

    Sections

  • Codecs/mp4demux.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bc54721f72d90d45f75f6f91ea250efb


    Headers

    Imports

    Exports

    Sections

  • Codecs/mp4mux.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    46e0fb3c586c85f97271f499acba27e2


    Headers

    Imports

    Exports

    Sections

  • Codecs/mp4v.dll
    .dll windows:4 windows x86 arch:x86

    030a353bc87d0e0fdf976987b755ae8c


    Headers

    Imports

    Exports

    Sections

  • Codecs/real/14_43260.dll
    .dll windows:4 windows x86 arch:x86

    10cc1c83f991b066cba98aa471df4e60


    Headers

    Imports

    Exports

    Sections

  • Codecs/real/28_83260.dll
    .dll windows:4 windows x86 arch:x86

    3fde72e769c2ba8f88c009f3828dd015


    Headers

    Imports

    Exports

    Sections

  • Codecs/real/amrn.dll
    .dll windows:4 windows x86 arch:x86

    50e39fe3221cb763784a4da9ebd4893a


    Headers

    Imports

    Exports

    Sections

  • Codecs/real/atrc.dll
    .dll windows:4 windows x86 arch:x86

    5132cde9ac8899a69f40dfaacc320c4d


    Headers

    Imports

    Exports

    Sections

  • Codecs/real/cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • Codecs/real/cook3260.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • Codecs/real/dnet3260.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Codecs/real/drv1.dll
    .dll windows:4 windows x86 arch:x86

    232d11e71e9db2c13e39696149eba4f6


    Headers

    Imports

    Exports

    Sections

  • Codecs/real/drv2.dll
    .dll windows:4 windows x86 arch:x86

    44586b56c5dcc55b19268bed59258786


    Headers

    Imports

    Exports

    Sections

  • Codecs/real/drvc.dll
    .dll windows:4 windows x86 arch:x86

    5d841dc9603dda4e7058b842c1dedbfc


    Headers

    Imports

    Exports

    Sections

  • Codecs/real/helixprodctrl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a8071b46ee93c5b4b766b5d5cba224ac


    Headers

    Imports

    Exports

    Sections

  • Codecs/real/helixprodctrl4.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a8071b46ee93c5b4b766b5d5cba224ac


    Headers

    Imports

    Exports

    Sections

  • Codecs/real/pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • Codecs/real/raac.dll
    .dll windows:4 windows x86 arch:x86

    2569b16af6a5e82c06ef6aed87f5e148


    Headers

    Imports

    Exports

    Sections

  • Codecs/real/ralf.dll
    .dll windows:4 windows x86 arch:x86

    ca3cf2dadfa161c51320288930144294


    Headers

    Imports

    Exports

    Sections

  • Codecs/real/sipr.dll
    .dll windows:4 windows x86 arch:x86

    ab44f666347fdcd438ddb88f10cba053


    Headers

    Imports

    Exports

    Sections

  • Codecs/vp7dec.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    81264cb0bc73710829255ea94441d901


    Headers

    Imports

    Exports

    Sections

  • Codecs/vp8decoder.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    8f73a92e24486315fea5ecb28ffeb341


    Headers

    Imports

    Exports

    Sections

  • Codecs/webmsource.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    f9afc54dad0af33f503764984b982e5c


    Headers

    Imports

    Exports

    Sections

  • Codecs/webmsplit.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    ca30abfbb60ab546fc91c1cf213d1506


    Headers

    Imports

    Exports

    Sections

  • Codecs/wm/mfplat.dll
    .dll windows:6 windows x86 arch:x86

    3fd147b0452b46798f75232ddc859db8


    Headers

    Imports

    Exports

    Sections

  • Codecs/wm/qasf.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections