General

  • Target

    3a41325d77d0fb2841a02fb58ae8dbd2_JaffaCakes118

  • Size

    5.4MB

  • MD5

    3a41325d77d0fb2841a02fb58ae8dbd2

  • SHA1

    d9972eb4fce2e8896ce9427b249fb9d5ff14fdd9

  • SHA256

    3eec80ae19766e4d5bbae331cd70abaf08fb07b1b72f0e9dfa68b0ee13a4e4e5

  • SHA512

    005e77930267b4cdc6cb764a3612394982c1fd2808a2968888cc61aef247b598d55c8ac4d0b19fe69b51e37401cafda8910acc358a5a7fce59729e255b38b4cc

  • SSDEEP

    98304:U1k8VO82XHfzqEKn7QSNak6VyhDLYnWO2XJ4tpx69BIMYMqjO97vbNnLlt:G2XHfOEKsniMn92Xitpx6DzYMSCvbNh

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs

Files

  • 3a41325d77d0fb2841a02fb58ae8dbd2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallerStuff.dll
    .dll windows:6 windows x86 arch:x86

    b07f91f7e65b795fb4d8e7b2673e3928


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OCSetupHlp.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    93bd1585ffbc730c763e71e0c6c896b3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsJSON.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/setup_cr.exe
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallerUtils.dll
    .dll windows:5 windows x86 arch:x86

    bd93dafddad5d317991cd88e0498a778


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Ivqyxeeikmjuu.tmp
  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    6aa1fb50f909cdf4bea3d3523348e900


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/welcome.bmp
  • DownLite.exe
    .exe windows:5 windows x86 arch:x86

    012d17dcdd80c23d701dd02dd2d9fce5


    Headers

    Imports

    Sections

  • uninstall.exe.nsis