Overview

overview

9

Static

static

7

THERMI~1.exe

windows7-x64

9

THERMI~1.exe

windows10-2004-x64

7

YOUTUB~1.exe

windows7-x64

7

YOUTUB~1.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

FFMPEG.exe

windows7-x64

3

FFMPEG.exe

windows10-2004-x64

3

MSCOMCTL.dll

windows7-x64

3

MSCOMCTL.dll

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

YouTubeDownloader.exe

windows7-x64

3

YouTubeDownloader.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3a81ef8f48b9d413d8fb90e5062c975c_JaffaCakes118

  • Size

    4.0MB

  • MD5

    3a81ef8f48b9d413d8fb90e5062c975c

  • SHA1

    985d1c5d73a5aa50caefe8e4d3d1639855c49b6c

  • SHA256

    564992ccba53319c1d260b1e645f691f5825689d4b1d2bd2532d9ad68fcf3fe5

  • SHA512

    2f02e7eabe616fe80bc2d7dc10701bf8f3097a403ffeba4c19a28fb5c05163b4d0aefc786400fb57bd65c96f5d36cffd41649fa3e04528c34ecaf90a95bf52cf

  • SSDEEP

    98304:gUNd0Awg/12FStTP3hSnC469sC5AKLgAPjVy7Y4Jhhhg98v1:HNdnZlvh34697AKrPjVy7bhq98t

Score
7/10
themida

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 3a81ef8f48b9d413d8fb90e5062c975c_JaffaCakes118
    .cab
  • THERMI~1.EXE
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • YOUTUB~1.EXE
    .exe windows:4 windows x86 arch:x86

    dae718ca7c0da2949ad685c2d593ec7a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • FFMPEG.EXE
    .exe windows:4 windows x86 arch:x86

    4ab21319aeaebefe1da9a7b99b5feb31


    Headers

    Imports

    Sections

  • Gears.AVI
  • HELP.HLP
  • Help.GID
  • MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    50ccb1d881ea89a41a10cced45c79649


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    dae718ca7c0da2949ad685c2d593ec7a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • YouTubeDownloader.exe
    .exe windows:4 windows x86 arch:x86

    f5b7f9f93f61886a6ef8665cb4d6e501


    Headers

    Imports

    Sections

  • mediaplayer.swf