General

  • Target

    17fa5bf843873425d0211cd7ddb6e90f_JaffaCakes118

  • Size

    1.3MB

  • MD5

    17fa5bf843873425d0211cd7ddb6e90f

  • SHA1

    218f5e7b069aa7187d3cc61cfcb72a0c11ee02c8

  • SHA256

    664159c75d53a6b71639b446b367dec89d4e49250acb25f2c09a175cf721ad56

  • SHA512

    297a3fe4177b88afee222a16833b6733a64df7c7689f8ed3215b5dac3bd9ca80c9bd93d908017e0ec2ea241f384e6b2f8d2832653bc8cc4dc82fa5b2160216fa

  • SSDEEP

    24576:re+KUjgCjFq1wksLr8HWtq3QHPByTJTo9LDOhdFQcoqWmluv47d0DdxmLbr15vxb:rSUjPjo9sLr8HWtqWJyTZsHOScCwOZxQ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 17fa5bf843873425d0211cd7ddb6e90f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1cf4252ebbb4f173d97a6ef4f79a60b5


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    1f4c4faa2a5228733f7ee5edf40f6693


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Base.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Base.ini
  • Lang/De/help.chm
    .chm
  • Lang/De/lang.ini
  • Lang/De/lang_b.ini
  • Lang/De/lang_g.ini
  • Lang/De/name
  • Lang/En/help.chm
    .chm
  • Lang/En/lang.ini
  • Lang/En/lang_b.ini
  • Lang/En/lang_g.ini
  • Lang/En/name
  • Lang/Ro/help.chm
    .chm
  • Lang/Ro/lang.ini
  • Lang/Ro/lang_b.ini
  • Lang/Ro/lang_g.ini
  • Lang/Ro/name
  • Lang/Ru/help.chm
    .chm
  • Lang/Ru/lang.ini
  • Lang/Ru/lang_b.ini
  • Lang/Ru/lang_g.ini
  • Lang/Ru/name
  • Lang/Ua/help.chm
    .chm
  • Lang/Ua/lang.ini
  • Lang/Ua/lang_b.ini
  • Lang/Ua/lang_g.ini
  • Lang/Ua/name
  • PlGen.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • PlGen.ini
  • Player.ini
  • Plugins/lame.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Plugins/oggenc.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Presets/AutoAmp/Normal.prs
  • Presets/Crossfade/Default.crp
  • Presets/Crossfade/Radiomix.crp
  • Presets/Echo/Abyss.prs
  • Presets/Echo/Combo.prs
  • Presets/Echo/Feedback Echo.prs
  • Presets/Echo/LR Echo.prs
  • Presets/Echo/LightEcho.prs
  • Presets/Echo/Reverb+Echo.prs
  • Presets/Echo/Trinity.prs
  • Presets/Echo2/Effect 5.prs
  • Presets/Echo2/In studio.prs
  • Presets/Echo2/Re-echo.prs
  • Presets/Echo2/Reflection.prs
  • Presets/Echo2/Repulse.prs
  • Presets/Echo2/Rich Double.prs
  • Presets/Echo2/Slo-mo.prs
  • Presets/Echo2/True Delay.prs
  • Presets/Echo2/Wave Delay.prs
  • Presets/Encoder.prs
  • Presets/Equalizer/Classical.eqp
  • Presets/Equalizer/Club.eqp
  • Presets/Equalizer/Dance.eqp
  • Presets/Equalizer/Default.eqp
  • Presets/Equalizer/Live.eqp
  • Presets/Equalizer/Party.eqp
  • Presets/Equalizer/Pop.eqp
  • Presets/Equalizer/Reggae.eqp
  • Presets/Equalizer/Rock.eqp
  • Presets/Equalizer/Ska.eqp
  • Presets/Equalizer/Soft Rock.eqp
  • Presets/Equalizer/Soft.eqp
  • Presets/Equalizer/Techno.eqp
  • Presets/Flanger2/Cut off.prs
  • Presets/Flanger2/Free Filter.prs
  • Presets/Flanger2/Up to Down.prs
  • Presets/Generator/default.prs.1
  • Presets/Reverb/Bazar.prs
  • Presets/Reverb/Hall.prs
  • Presets/Reverb/Lobby.prs
  • Presets/Reverb/Room.prs
  • Presets/Reverb/Shower.prs
  • Presets/Reverb/Tanker.prs
  • System.ini
  • bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • bass_fx.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • basscd.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • bassenc.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • basswma.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • devlist.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • encoder.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • license.txt
  • license_RU.txt
  • line.in
  • radioboss.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    1cf4252ebbb4f173d97a6ef4f79a60b5


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    1f4c4faa2a5228733f7ee5edf40f6693


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp