General

  • Target

    3b5ec4b56f0c183b4d84358d7b1e6e58_JaffaCakes118

  • Size

    1.5MB

  • MD5

    3b5ec4b56f0c183b4d84358d7b1e6e58

  • SHA1

    1d85238ba380c5084e8b44070233bd83505d47f0

  • SHA256

    9cc7c917b15598894021484ffa4461a60b05e00f0ca1db1e003bd233a0a59709

  • SHA512

    1e5a29c2fbea858df768fcfd95fa0c8fa33c65e780f0a409b5195f17a1f89b4d7179936b6a2f34f90edff059fb9081e5c1001ab58aac4b3639c6c179b1ea82d7

  • SSDEEP

    24576:yinSC5vMZMIbLoygpwp5ewKEwbOaU9Vbsw6A5STu1dR6tHPg/AAlLBktei9vCbnw:ywU3LoygpW5TKvUbQw6+S+yu/A3tewvZ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 3 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b5ec4b56f0c183b4d84358d7b1e6e58_JaffaCakes118
    .rar
  • 6245/6245.jpg
    .jpg
  • 6245/BMP/1-1.bmp
  • 6245/BMP/1-2.bmp
  • 6245/BMP/1-3.bmp
  • 6245/BMP/10-1.bmp
  • 6245/BMP/10-2.bmp
  • 6245/BMP/10-3.bmp
  • 6245/BMP/11-1.bmp
  • 6245/BMP/11-2.bmp
  • 6245/BMP/11-3.bmp
  • 6245/BMP/12-1.bmp
  • 6245/BMP/12-2.bmp
  • 6245/BMP/12-3.bmp
  • 6245/BMP/13-1.bmp
  • 6245/BMP/13-2.bmp
  • 6245/BMP/13-3.bmp
  • 6245/BMP/14-1.bmp
  • 6245/BMP/14-2.bmp
  • 6245/BMP/14-3.bmp
  • 6245/BMP/15-1.bmp
  • 6245/BMP/15-2.bmp
  • 6245/BMP/15-3.bmp
  • 6245/BMP/16-1.bmp
  • 6245/BMP/16-2.bmp
  • 6245/BMP/16-3.bmp
  • 6245/BMP/17-1.bmp
  • 6245/BMP/17-2.bmp
  • 6245/BMP/17-3.bmp
  • 6245/BMP/18-1.bmp
  • 6245/BMP/18-2.bmp
  • 6245/BMP/18-3.bmp
  • 6245/BMP/19-1.bmp
  • 6245/BMP/19-2.bmp
  • 6245/BMP/19-3.bmp
  • 6245/BMP/2-1.bmp
  • 6245/BMP/2-2.bmp
  • 6245/BMP/2-3.bmp
  • 6245/BMP/20-1.bmp
  • 6245/BMP/20-2.bmp
  • 6245/BMP/20-3.bmp
  • 6245/BMP/21-1.bmp
  • 6245/BMP/21-2.bmp
  • 6245/BMP/21-3.bmp
  • 6245/BMP/22-1.bmp
  • 6245/BMP/22-2.bmp
  • 6245/BMP/22-3.bmp
  • 6245/BMP/3-1.bmp
    .jpg
  • 6245/BMP/3-2.bmp
    .jpg
  • 6245/BMP/3-3.bmp
    .jpg
  • 6245/BMP/4-1.bmp
  • 6245/BMP/4-2.bmp
  • 6245/BMP/4-3.bmp
  • 6245/BMP/5-1.bmp
  • 6245/BMP/5-2.bmp
  • 6245/BMP/5-3.bmp
  • 6245/BMP/6-1.bmp
  • 6245/BMP/6-2.bmp
  • 6245/BMP/6-3.bmp
  • 6245/BMP/7-1.bmp
  • 6245/BMP/7-2.bmp
  • 6245/BMP/7-3.bmp
  • 6245/BMP/8-1.bmp
  • 6245/BMP/8-2.bmp
  • 6245/BMP/8-3.bmp
  • 6245/BMP/9-1.bmp
  • 6245/BMP/9-2.bmp
  • 6245/BMP/9-3.bmp
  • 6245/BMP/Thumbs.db
  • 6245/MSINET.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    96286284ff8e040938ba779778d1542e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 6245/MSWINSCK.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    cb0275eec9ac31b6d4d44320e576fadb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 6245/RndCardID.txt
  • 6245/Vote-2012-6245.exe
    .exe windows:4 windows x86 arch:x86

    5d2cec980f6c5a93dc5251726f44ef15


    Headers

    Imports

    Sections

  • 6245/set.ini
  • 6245/y300xxxx.CLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 6245/ycode.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 6245/ys.fc
  • 6245/yxxxx.CLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 6245/使用说明.txt
  • 6245/服务器软件.url
  • 6245/脚本之家.url