General

  • Target

    e91105013d28a9c5b5368834c6438921_JaffaCakes118

  • Size

    5.8MB

  • MD5

    e91105013d28a9c5b5368834c6438921

  • SHA1

    0569727407f781ac0661570c7fb7d21f2ac2edd5

  • SHA256

    55b1b1c9909fbb7b39fa4e50bf740bc1754b1d08332b9788c097ecd961f362dc

  • SHA512

    aa673d8174b6f20265c31f93b99f88526059f978e851dfbaa7f866b742c0b3c7da7ea08467ad420cf6f7e81397dd4a8523e7c0769d07740b13c8321f6bf994dd

  • SSDEEP

    98304:O1eR+ZUXS2L2gFMjUATJvrau695R+h0fNsTS+8ZGLhvg1HW0duplOEZ9Dbq:UeR8UXS2LinaV92G6S3ZGLhN0wrTq

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 13 IoCs

    Detects file using ACProtect software.

  • UPX packed file 14 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • e91105013d28a9c5b5368834c6438921_JaffaCakes118
    .rar
  • FILE_ID.DIZ
  • LICENSE.TXT
  • winwma_install.exe
    .exe windows:4 windows x86 arch:x86

    1433f2e02f7db60c6c8547c52a3f8504


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    1f4c4faa2a5228733f7ee5edf40f6693


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/authdvd.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $SYSDIR/ntaspi32.dll
    .dll windows:4 windows x86 arch:x86

    359f7c431bd2e36fca441bf86f72924c


    Headers

    Imports

    Exports

    Sections

  • FILE_ID.DIZ
  • LICENSE.TXT
  • MainCore.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • MediaTwins official web site.url
    .url
  • MediaTwins technical support online.url
    .url
  • Plugins/IDTagger.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/In/AC3Input.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Plugins/In/MP3 and mp3PRO Decoder.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/In/Vorbis Decoder.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Plugins/In/WMAInput.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/In/Waveform Decoder.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/Out/PCMOut.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/Out/WMAOut.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • akrip.dll
    .dll windows:4 windows x86 arch:x86

    45ec67e481ab8a31b9aa41506bba08e1


    Headers

    Imports

    Exports

    Sections

  • cddb.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • cddbdll.dll
    .dll windows:4 windows x86 arch:x86

    3269b0b17f7531e4d835464274ad546d


    Headers

    Imports

    Exports

    Sections

  • freshupdate.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • help/akrip/AKRip CD-DA Audio Extraction Library.url
    .url
  • help/akrip/lgpl.txt
  • help/akrip/readme-akrip.txt
  • help/winwma.chm
    .chm
  • id3lib.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • langres.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • official page.url
    .url
  • sections.xml
    .xml
  • settings.ini
  • setup_left.bmp
  • setup_top.bmp
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    1433f2e02f7db60c6c8547c52a3f8504


    Headers

    Imports

    Sections

  • winwma.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • winwma.exe.manifest
    .xml
  • wmfadist.exe
    .exe windows:5 windows x86 arch:x86

    1494de9b53e05fc1f40cb92afbdd6ce4


    Code Sign

    Headers

    Imports

    Sections

  • 下载说明.htm
    .html .js polyglot