General

  • Target

    JaffaCakes118_1c70bab0ffbbf03ae6d4f95c7454a052

  • Size

    1.4MB

  • MD5

    1c70bab0ffbbf03ae6d4f95c7454a052

  • SHA1

    1252d6446868fb48946de8ec01ee8fa5bac80d14

  • SHA256

    4dae9f99e0707d4e175ea846b23f32ef5cb63d055fc8ee30b35099783f0cc869

  • SHA512

    7bd4e4b8ccc59645dd5d23b0eb73b64513898e70d719caa464fade70c91e3519d80f92f0ed050b7bc3d7c9ca2a1f2da2f19e10903ca57de01da1d64781fcb688

  • SSDEEP

    24576:L2KqYz3utEROE3cvWt9xkAzb8cQlE++NHXYNoPfSk:pD/OKc4xXz6F+iNoCk

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_1c70bab0ffbbf03ae6d4f95c7454a052
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Ask_Logo.bmp
  • $PLUGINSDIR/InvokeShellVerb.dll
    .dll windows:4 windows x86 arch:x86

    1dd17c8be9b0761e58bbdf6fc06463e3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MoreInfo.dll
    .dll windows:4 windows x86 arch:x86

    149adf074d317fbf0d2f17314bd18969


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    c4a726be6ec458c19b16bf3893cf4bc1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ask_eula.rtf
    .rtf
  • $PLUGINSDIR/banner.bmp
  • $PLUGINSDIR/banner_chrome.bmp
  • $PLUGINSDIR/banner_chrome_36.bmp
  • $PLUGINSDIR/banner_ff.bmp
  • $PLUGINSDIR/banner_ie.bmp
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisXML.dll
    .dll windows:4 windows x86 arch:x86

    1156b4dd8fa8f1d42696b7a2d5b3e139


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $R1/$_1_/Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    c4a726be6ec458c19b16bf3893cf4bc1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $R1/$_1_/apphelp.dll
    .dll windows:5 windows x86 arch:x86

    a67f45b2e1e209d365ca7136c58ff087


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $R1/$_1_/license.txt
  • $R1/$_1_/soffer.dll
    .dll windows:5 windows x86 arch:x86

    ec7f08258a6e85455901e00bbb9a8ccf


    Code Sign

    Headers

    Imports

    Exports

    Sections