Overview

overview

7

Static

static

3

7d5aa6ec17...18.exe

windows7-x64

7

7d5aa6ec17...18.exe

windows10-2004-x64

7

$1/Mp3tagStuff.exe

windows7-x64

1

$1/Mp3tagStuff.exe

windows10-2004-x64

1

$3/Mp3tagApp.exe

windows7-x64

1

$3/Mp3tagApp.exe

windows10-2004-x64

1

$APPDATA/M...er.exe

windows7-x64

7

$APPDATA/M...er.exe

windows10-2004-x64

7

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$R1/Mp3tag.exe

windows7-x64

1

$R1/Mp3tag.exe

windows10-2004-x64

1

$R1/tak_deco_lib.dll

windows7-x64

3

$R1/tak_deco_lib.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    7d5aa6ec17fc0bc0cb886ebf001d9ff5_JaffaCakes118

  • Size

    2.8MB

  • MD5

    7d5aa6ec17fc0bc0cb886ebf001d9ff5

  • SHA1

    6053439f3307fd7e76b4430b2a7a4bf990eb81a2

  • SHA256

    093290ebca13dfaa2e15fee47c7a4ecda5b6462d28c928d3bc306e14f60137cc

  • SHA512

    3104c980c837a19b620a94ec62fe03ebdeb75d35d83baf934ca24938195e48d45ffffcdb7eec8906473e3344f2026b953afc61809a826617ebdfdca2bfaba5a8

  • SSDEEP

    49152:l0Win+rB4sV+DYkV3o/+J7l/jHjfeu9VXct1xM2AOuKFsp8QSnm9RB270sIv+0gK:lrHBVM4GTjHLeuWSbOuKFsp8NQ7NsIvx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 7d5aa6ec17fc0bc0cb886ebf001d9ff5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Headers

    Imports

    Sections

  • $1/Mp3tagStuff.exe
    .exe windows:6 windows x86 arch:x86

    a385013c6994a1f6269ad2733aa7d75b


    Headers

    Imports

    Sections

  • $3/Mp3tagApp.exe
    .exe windows:5 windows x86 arch:x86

    32002fa3a57d8ff762864f46bd7d93c4


    Headers

    Imports

    Sections

  • $APPDATA/Mp3tagApp/uninstaller.exe
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $R1/Mp3tag.exe
    .exe windows:5 windows x86 arch:x86

    d8a78eacce837bb2a92c9921b7d87c31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $R1/Mp3tagQuickPick.lng
  • $R1/Mp3tagSetup.ini
  • $R1/data/actions/CD-R.mta
  • $R1/data/actions/Case conversion.mta
  • $R1/data/actions/Standard.mta
  • $R1/data/empty.mte
  • $R1/data/freedb.src
  • $R1/data/genres.ini
  • $R1/data/sources/discogs.src
  • $R1/export/RTF.mte
  • $R1/export/csv.mte
  • $R1/export/html_mp3tag.mte
  • $R1/export/html_standard.mte
  • $R1/export/sfv.mte
  • $R1/export/txt_taglist.mte
  • $R1/lang/English.lng
  • $R1/mp3tag.lng
  • $R1/tak_deco_lib.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections