General

  • Target

    38be95087a38dcb59176f789d160680f_JaffaCakes118

  • Size

    9.6MB

  • MD5

    38be95087a38dcb59176f789d160680f

  • SHA1

    c6e6e494245ae7f8bd0bfcaf066b8b08eb4a5ce9

  • SHA256

    306b11a84f608c0d0509a3476261d4c66bf9e967675e2f92e4ff9439ddede8ae

  • SHA512

    cfb6b35ed89d109d0f5d0c67f578505561c17947f35ec53f798827b278482b2a9c5b52d9bfa5221ef30e197a040196701de6af187334c914bd362b8a6da4558a

  • SSDEEP

    196608:s8KDPiwwtNbQ9aHV3PwYc/byIn+GLno4r3l8TlxM+xr1VHHobpLQ:zTXHLVYj/+ITo4DlAXxPotQ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 38be95087a38dcb59176f789d160680f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DcryptDll.dll
    .dll windows:4 windows x86 arch:x86

    5e1d3f49e5b7590e18325930cd3084f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/locate.dll
    .dll windows:4 windows x86 arch:x86

    7f8181c74f882a780c7cd485241e8b51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsRandom.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $TEMP/key.lky
  • Crawler.db
  • Microsoft.VC90.CRT.manifest
  • Microsoft.VC90.OpenMP.manifest
    .xml
  • NumCube.exe
    .exe windows:5 windows x86 arch:x86

    dc6ceab5af8a2af2668e09f77e9c1409


    Headers

    Imports

    Sections

  • NumCube.log
  • QSearchNum.exe
    .exe windows:5 windows x86 arch:x86

    011611741c6e81e2251bb670ebbbbd37


    Headers

    Imports

    Sections

  • QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    2e29b114ef9e26761606f1a1b75372bb


    Headers

    Imports

    Exports

    Sections

  • QtGui4.dll
    .dll windows:5 windows x86 arch:x86

    ebecf690b08e6cc600a2629beaeeb7b1


    Headers

    Imports

    Exports

    Sections

  • QtNetwork4.dll
    .dll windows:5 windows x86 arch:x86

    ce2791c5f77113aba60c3a884a7942ad


    Headers

    Imports

    Exports

    Sections

  • QtSql4.dll
    .dll windows:5 windows x86 arch:x86

    83ed0482448dc6a445dd9e1a840de42c


    Headers

    Imports

    Exports

    Sections

  • QtWebKit4.dll
    .dll windows:5 windows x86 arch:x86

    6e427a998048e88bb038e98139a1bb94


    Headers

    Imports

    Exports

    Sections

  • Text/aboutdl.txt
  • Text/aboutqf.txt
  • Text/aboutus.txt
  • Upgrade.exe
    .exe windows:5 windows x86 arch:x86

    a93f1f046f088ec7a638379beb7b3fec


    Headers

    Imports

    Sections

  • bzip2.dll
    .dll windows:5 windows x86 arch:x86

    67c170f7d71024d537d578956368749c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • codecs/Microsoft.VC90.CRT.manifest
  • codecs/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    2dec2d42421b088bfcddeba53b046464


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • codecs/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • codecs/qcncodecs4.dll
    .dll windows:5 windows x86 arch:x86

    4d6e61e3b0a6eee1a5467f35e0dd325c


    Headers

    Imports

    Exports

    Sections

  • config
  • ice34.dll
    .dll windows:5 windows x86 arch:x86

    3321b544a1c4881eef011b8287aa9acb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • iceutil34.dll
    .dll windows:5 windows x86 arch:x86

    f34d4d19d361b718e709f5dbc701e728


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/Microsoft.VC90.CRT.manifest
  • imageformats/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    2dec2d42421b088bfcddeba53b046464


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qico4.dll
    .dll windows:5 windows x86 arch:x86

    02c378f237b334d8de3653a5422be7ce


    Headers

    Imports

    Exports

    Sections

  • msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    2dec2d42421b088bfcddeba53b046464


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • phonon4.dll
    .dll windows:5 windows x86 arch:x86

    c3d1bbbe2939001631ad32d48d025e3b


    Headers

    Imports

    Exports

    Sections

  • pskill.exe
    .exe windows:5 windows x86 arch:x86

    581bbb78c43ca05f50cb74db6ef4e6aa


    Code Sign

    Headers

    Imports

    Sections

  • qss/main.qss
  • sms.dat
  • sms.db
  • sqldrivers/Microsoft.VC90.CRT.manifest
  • sqldrivers/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    2dec2d42421b088bfcddeba53b046464


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sqldrivers/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sqldrivers/qsqlite4.dll
    .dll windows:5 windows x86 arch:x86

    1a28034a18619fe68135113fd7f35c59


    Headers

    Imports

    Exports

    Sections

  • sys.ini
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • vcomp90.dll
    .dll windows:5 windows x86 arch:x86

    718f76580a1c6ed142d2ebb3755ae79c


    Code Sign

    Headers

    Imports

    Exports

    Sections