Overview

overview

7

Static

static

7

3cbbe3d7d2...18.exe

windows7-x64

3

3cbbe3d7d2...18.exe

windows10-2004-x64

3

$0.exe

windows7-x64

7

$0.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...40.dll

windows7-x64

5

$PLUGINSDI...40.dll

windows10-2004-x64

5

$SYSDIR/$0.dll

windows7-x64

3

$SYSDIR/$0.dll

windows10-2004-x64

3

$SYSDIR/$_3_.dll

windows7-x64

3

$SYSDIR/$_3_.dll

windows10-2004-x64

3

$SYSDIR/$_4_.exe

windows7-x64

7

$SYSDIR/$_4_.exe

windows10-2004-x64

7

$WINDIR/HELP/$_3_.dll

windows7-x64

3

$WINDIR/HELP/$_3_.dll

windows10-2004-x64

3

$_3_.dll

windows7-x64

3

$_3_.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3cbbe3d7d253f304cccf5f7db1352bb1_JaffaCakes118

  • Size

    6.8MB

  • MD5

    3cbbe3d7d253f304cccf5f7db1352bb1

  • SHA1

    fd985cec93483787669daee90ebd6476f0c55879

  • SHA256

    06a6404d811ce441b53e1d59e4e9fb8ed9f3bd479d4c739ed37c3f1aa6dd0ccc

  • SHA512

    7c50aa1578a1e48649400658bb6ed783bb3dc9aa3a1d40e8cb4358d7f857f97eed219d75175986fba97f8b76587b42cd837c450706eee7f2eb9dc798b0821d9e

  • SSDEEP

    196608:StNZps4FAz6ru/YXfO2eNTvQx+ayMev/HdW8hGAtJ:QNZp/FAzmXm2eNrQcaCPs8hnJ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 3cbbe3d7d253f304cccf5f7db1352bb1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $0
    .exe windows:4 windows x86 arch:x86

    5b36115ff362711943f368adb695e60e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/access40.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/ioB_english.ini
  • $PLUGINSDIR/ioB_russian.ini
  • $PLUGINSDIR/ioC_english.ini
  • $PLUGINSDIR/ioC_russian.ini
  • $PLUGINSDIR/ioD_english.ini
  • $PLUGINSDIR/ioD_russian.ini
  • $PLUGINSDIR/modern-header.bmp
  • $SYSDIR/$0
    .dll windows:4 windows x86 arch:x86

    76e44273ae3fb63fd0741b8c19b0fb67


    Headers

    Imports

    Sections

  • $SYSDIR/$_3_
    .dll windows:4 windows x86 arch:x86

    76e44273ae3fb63fd0741b8c19b0fb67


    Headers

    Imports

    Sections

  • $SYSDIR/$_4_
    .exe windows:4 windows x86 arch:x86

    5b36115ff362711943f368adb695e60e


    Headers

    Imports

    Sections

  • $WINDIR/HELP/$_3_
    .dll windows:4 windows x86 arch:x86

    76e44273ae3fb63fd0741b8c19b0fb67


    Headers

    Imports

    Sections

  • $_3_
    .dll windows:4 windows x86 arch:x86

    76e44273ae3fb63fd0741b8c19b0fb67


    Headers

    Imports

    Sections