General

  • Target

    3ee650e5f475f8a604ab2d8b9ad139bf_JaffaCakes118

  • Size

    3.1MB

  • MD5

    3ee650e5f475f8a604ab2d8b9ad139bf

  • SHA1

    74f79409ffb176a92e3f134546457a52b5ff1c38

  • SHA256

    a9d8461aa9215689fb758da3aaf14b832a8846b9c3f39ece7f86cae8e6673ea8

  • SHA512

    fec0521d79c39003781070eea72077ede7d52fb7bb296851e1b053de855fdef49e9199553272bdfd30051cdce76c29e6b77d1d6866832d0b526c67c217403201

  • SSDEEP

    98304:K+OM5IoP2Fc9IQlbyfGqHUyzcCYYZ//uBFy:Xb1Yc+QlmfG6UPYmM

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 3ee650e5f475f8a604ab2d8b9ad139bf_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Baidubar.bmp
  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    1ba6926a1ee4e4cda118768081f528d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/blowfish.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/left.bmp
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRandom.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • PBDWE115.DLL
    .dll windows:4 windows x86 arch:x86

    f0b61dcedaa75e2e0a2c6342938119b6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PBODB115.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    82caaf574774cf543628dad1b4605bb5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PBSHR115.DLL
    .dll windows:4 windows x86 arch:x86

    a7eb34dd359f2118f2a3b40faf1a56ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PBVM115.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • atl71.dll
    .dll windows:4 windows x86 arch:x86

    7c3004ebf21f282412fa952c164aa2bb


    Headers

    Imports

    Exports

    Sections

  • data.dat
  • dwud.pbd
  • dwuo.pbd
  • dxcx.pbd
  • dxjm.pbd
  • dxjrl.dll
    .dll windows:4 windows x86 arch:x86

    68f2ad7558cfce7f22019a7563efc21c


    Headers

    Imports

    Exports

    Sections

  • dxjsoft.dll
    .dll windows:4 windows x86 arch:x86

    bed70185f8672c7a99d37171dfb0f4d1


    Headers

    Imports

    Exports

    Sections

  • dxjxh.pbd
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • dxuw.pbd
  • libjcc.dll
    .dll windows:4 windows x86 arch:x86

    1b0a346547e8b86414e28a4684240aa7


    Headers

    Imports

    Exports

    Sections

  • libjutils.dll
    .dll windows:4 windows x86 arch:x86

    33ee2cba20d82f3820335a0a2b65bb83


    Headers

    Imports

    Exports

    Sections

  • pbdpl115.DLL
    .dll windows:4 windows x86 arch:x86

    daebdb43eef6bb1de7740ebaefecc2d9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ͻ/PBDWE115.DLL
    .dll windows:4 windows x86 arch:x86

    f0b61dcedaa75e2e0a2c6342938119b6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ͻ/PBODB115.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    82caaf574774cf543628dad1b4605bb5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ͻ/PBSHR115.DLL
    .dll windows:4 windows x86 arch:x86

    a7eb34dd359f2118f2a3b40faf1a56ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ͻ/atl71.dll
    .dll windows:4 windows x86 arch:x86

    7c3004ebf21f282412fa952c164aa2bb


    Headers

    Imports

    Exports

    Sections

  • ͻ/libjcc.dll
    .dll windows:4 windows x86 arch:x86

    1b0a346547e8b86414e28a4684240aa7


    Headers

    Imports

    Exports

    Sections

  • ͻ/libjutils.dll
    .dll windows:4 windows x86 arch:x86

    33ee2cba20d82f3820335a0a2b65bb83


    Headers

    Imports

    Exports

    Sections

  • ͻ/pbdpl115.DLL
    .dll windows:4 windows x86 arch:x86

    daebdb43eef6bb1de7740ebaefecc2d9


    Code Sign

    Headers

    Imports

    Exports

    Sections