a36b080f0606bdc25357ab9853039072_JaffaCakes118
- SHA256 e984a62feb739ce0a07f1d2397bdad1cf99fa7b5f4b33abccd89a2361b441b9a
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Muon Tau Bassline Mk2 VSTi v10/Crack/Tau2OGF.exe
Resource
win7-20240220-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Muon Tau Bassline Mk2 VSTi v10/Crack/Tau2OGF.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Muon Tau Bassline Mk2 VSTi v10/Setup/Setup.exe
Resource
win7-20240611-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Muon Tau Bassline Mk2 VSTi v10/Setup/Setup.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
4 signatures
150 seconds
General
- Target a36b080f0606bdc25357ab9853039072_JaffaCakes118
- Size 1.6MB
- Sample240613-b595tszdja
- SHA256 e984a62feb739ce0a07f1d2397bdad1cf99fa7b5f4b33abccd89a2361b441b9a
- MD5 a36b080f0606bdc25357ab9853039072
- SHA1 fe8be341dbdd3ca5321bf5d937afc039241b73e5
- SHA512 ecf12388460ea57a991eeb28fadebeff53cf6255f2abbd5df715665c3878a682cd6c5ee002a54546a36423c273237a8fa7f6ab8d468f23d1dacdc3bea6f64b61
- SSDEEP 49152:mbMoK7R4yS0+dijwug2TjUyH+8eja/WpI:mbpeRIijpg2/5+/xI
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Muon Tau Bassline Mk2 VSTi v10/Crack/Tau2OGF.exe unpack001/Muon Tau Bassline Mk2 VSTi v10/Setup/Setup.exe
File Explorer
-
a36b080f0606bdc25357ab9853039072_JaffaCakes118.rar 1.6MB
-
Muon Tau Bassline Mk2 VSTi v10/Crack/Tau2OGF.exe.exe 511KB
-
Muon Tau Bassline Mk2 VSTi v10/ReadMe/0xdBass.nfo1KB
-
Muon Tau Bassline Mk2 VSTi v10/ReadMe/Инструкция по установке.txt592B
-
Muon Tau Bassline Mk2 VSTi v10/Setup/Setup.exe.exe 1.6MB
Muon Tau Bassline Mk2 VSTi v10/Crack/Tau2OGF.exe
- SHA256 0b02386eb216cc876a6e41bfd2ee8b3445ce59d7460d15b53c84335484e20956
- MD5 50ef83b839a1c7a354f973c5b841ff1b
- SHA1 1f599277b4e1e92ad31c245b19fd1d562ed2b86a
- SHA512 d775ff1772460567efd09f057b4d6746785aa3cc2a0624bd6b71c50a358b4c1e882719213061ee25e08ef822b2420f65eaaa6c8e53079fb269d6397606127071
- SSDEEP 12288:elAcRpam429223uuRK0FDEEvMEj/FG/qMMPrqCRzDmUN/bS4WPzmi47/ui3nGuBX:eqcRp937KnE0l/qMlW02i47/uihX
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
1
Entry point
30784
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
.text
Size
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.udata
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
505KB
Virtual Size
505KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
Muon Tau Bassline Mk2 VSTi v10/ReadMe/0xdBass.nfo
- SHA256 02c82c97aa664b3f14fa9ccfb6bb56311542959cb6b61ef116cf4d5bcd8b57d9
- MD5 19cdb95937f9ed03a4c69e90539e422c
- SHA1 379e29bf325e714f4381c084e378d07d611060b4
- SHA512 fceaddfcfb3837ccc95379fb19c5eaf8d35e89a71b2293b0ee36df55f9db8f1648a33ca9faa6fd4104f95e10d34671e6b04612a73be375f936ba3647f6152c37
- MD5 SHA1 SHA512
Muon Tau Bassline Mk2 VSTi v10/ReadMe/Инструкция по установке.txt
- SHA256 f3e47e825ea47b8a2e08a8ca5b6f0d9988cfb7209b67dd669d0abd6f8609a261
- MD5 b74132c33c90feb6d6377a0093114283
- SHA1 41f7e6af7a2a9b2ef8358c509811dd8e372716b0
- SHA512 1f321595ae3533aa67caa4f68944c529b85ed810fde11d67935ca1309b48f47f73017f201d9702615cf5508d23eb084fae3f51842bca05a735753b0bfbddf033
- MD5 SHA1 SHA512
Muon Tau Bassline Mk2 VSTi v10/Setup/Setup.exe
- IMPHASH d02b258601410d6bdc58dda2cbe5f615
- SHA256 a8d56c67cb1f4c27aa998dedaf7bcd38fd95f303e00beb6d27a6118ec46349a1
- MD5 a519799ff8753e9561d7571b4521a6e0
- SHA1 7edd216f6941837b42f5e14ddf5d6aa18c18eb80
- SHA512 d0fe36a8d8b53cddeade36c8368bcec2be2ab59fc9fc6a5f9b090f4b1cd02769cf381c62488a8a624de23c6c055adc5270e85b72aa5d8281e79a169b99ce3ea8
- SSDEEP 49152:q3uyvd1Uct3E7Lv1X/lKmgjM5U2TwfSj5TI6:q+yvX9E7b1X/lxgAUFfSj5TL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10209
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
_lcreat
_llseek
_lread
GetTempPathA
GetSystemDefaultLangID
DeleteFileA
_lwrite
SetCurrentDirectoryA
CreateDirectoryA
GetDiskFreeSpaceA
lstrcatA
WritePrivateProfileStringA
CreateProcessA
CloseHandle
_lopen
_lclose
lstrlenA
TerminateProcess
GetCurrentProcess
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
LoadLibraryA
LCMapStringA
GetOEMCP
GetACP
GetProcAddress
WriteFile
RtlUnwind
GetCPInfo
GetStdHandle
SetHandleCount
GetFileType
GetEnvironmentStrings
lstrcpyA
GetEnvironmentStringsW
GetModuleFileNameA
GetLastError
FreeEnvironmentStringsA
UnhandledExceptionFilter
FreeEnvironmentStringsW
HeapReAlloc
VirtualAlloc
HeapCreate
GetPrivateProfileStringA
lstrcmpA
HeapFree
HeapAlloc
ExitProcess
WideCharToMultiByte
HeapDestroy
VirtualFree
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
user32
LoadCursorA
RegisterClassA
RegisterClassExA
UpdateWindow
LoadIconA
LoadStringA
CreateWindowExA
ShowWindow
GetClientRect
SendMessageA
GetWindowRect
wsprintfA
DefWindowProcA
MessageBoxA
BeginPaint
MsgWaitForMultipleObjects
PeekMessageA
DestroyWindow
DrawTextA
EndPaint
GetMessageA
PostQuitMessage
PostMessageA
GetDesktopWindow
TranslateMessage
DispatchMessageA
gdi32
SelectObject
GetDeviceCaps
SetBkMode
CreateFontA
comctl32
ord17
Name
.text
Size
20KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
40KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=25, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=11, id=14, version=7299,
count=7, id=19, version=8034,
count=96, id=1, productName=Unmarked objects,
count=1, id=11, version=8447,
count=5, productName=Unmarked objects (old),
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,