General

  • Target

    08cc3f56a1d86f8b270d80e95bfa3002_JaffaCakes118

  • Size

    13.9MB

  • MD5

    08cc3f56a1d86f8b270d80e95bfa3002

  • SHA1

    812f61cf95b091344159a3a87d729dbe6092392a

  • SHA256

    f5e36e998ee40034397ab78a669994527679f6137578da0346c15fee7c70ed9d

  • SHA512

    ae401654d7f96b862ace02dcddeb5a099cc02fa9c45a2f3ec77beee627876df5d6179f3252bfc3c63eae959db446d1ff557e400b377c91ab5da8b86efe952711

  • SSDEEP

    393216:S3kz/d2ZlFQn1VBcUSTZaMRrE0Dl8lebj+5qM:S3kBa2nxTSDDS5n

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Unsigned PE 52 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 08cc3f56a1d86f8b270d80e95bfa3002_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4f2145f489d9c324280558d2e08c717d


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    9d433976e02d79532f0d635ee81d0b20


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • 163888.net_Activity.exe
    .exe windows:4 windows x86 arch:x86

    1922f0ddebfaae545dcd01dd9dc09c8b


    Headers

    Imports

    Sections

  • AdaptX30.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • BGOTHL.TTF
  • DetectDXAndWMP.exe
    .exe windows:4 windows x86 arch:x86

    3b7d2f45e07056d3db59c16edf290b17


    Headers

    Imports

    Sections

  • EffectParam/KTV£¨ÄУ©.stg
  • EffectParam/KTV£¨Å®£©.stg
  • EffectParam/fix/amm.stg
  • EffectParam/fix/recordpre.stg
  • EffectParam/±¥ÂúÈËÉù£¨ÄУ©.stg
  • EffectParam/±¥ÂúÈËÉù£¨Å®£©.stg
  • EffectParam/´ÅÐÔÈËÉù.stg
  • EffectParam/´ó·¿¼ä£¨ÄУ©.stg
  • EffectParam/´ó·¿¼ä£¨Å®£©.stg
  • EffectParam/µç»°Ð§¹û.stg
  • EffectParam/·Ç¾ùºâÈËÉù(3).stg
  • EffectParam/·Ç¾ùºâÈËÉù£¨1£©.stg
  • EffectParam/·Ç¾ùºâÈËÉù£¨2£©.stg
  • EffectParam/¸ßƵ¼¤Àø.stg
  • EffectParam/¸ßÑÓ³Ù£¨ÄУ©.stg
  • EffectParam/¸ßÑÓ³Ù£¨Å®£©.stg
  • EffectParam/¾ç³¡£¨ÄУ©.stg
  • EffectParam/¾ç³¡£¨Å®£©.stg
  • EffectParam/¿ÍÌü£¨ÄУ©.stg
  • EffectParam/¿ÍÌü£¨Å®£©.stg
  • EffectParam/¿íÀ«ÈËÉù£¨ÄУ©.stg
  • EffectParam/¿íÀ«ÈËÉù£¨Å®£©.stg
  • EffectParam/ÀÏʽÊÕÒô»ú.stg
  • EffectParam/Äî°×ÈËÉù.stg
  • EffectParam/Çá΢ÑÓ³Ù£¨ÄУ©.stg
  • EffectParam/Çá΢ÑÓ³Ù£¨Å®£©.stg
  • EffectParam/Ç峪ÈËÉù£¨ÄУ©.stg
  • EffectParam/Ç峪ÈËÉù£¨Å®£©.stg
  • EffectParam/ÈáºÍÈËÉù£¨ÄУ©.stg
  • EffectParam/ÈáºÍÈËÉù£¨Å®£©.stg
  • EffectParam/ÒôÀÖÌü£¨ÄУ©.stg
  • EffectParam/ÒôÀÖÌü£¨Å®£©.stg
  • EffectParam/Ó²ÈËÉù.stg
  • EffectParam/ÔëÒô˵Ã÷.txt
  • ExtDll.dll
    .dll windows:4 windows x86 arch:x86

    fb8b9904488d6150bc97927c1713a37c


    Headers

    Imports

    Exports

    Sections

  • Face/1.bmp
  • Face/10.bmp
  • Face/10_m.bmp
  • Face/11.bmp
  • Face/11_m.bmp
  • Face/12.bmp
  • Face/12_m.bmp
  • Face/13.bmp
  • Face/13_m.bmp
  • Face/14.bmp
  • Face/14_m.bmp
  • Face/15.bmp
  • Face/15_m.bmp
  • Face/16.bmp
  • Face/16_m.bmp
  • Face/17.bmp
  • Face/17_m.bmp
  • Face/18.bmp
  • Face/18_m.bmp
  • Face/19.bmp
  • Face/19_m.bmp
  • Face/1_m.bmp
  • Face/2.bmp
  • Face/20.bmp
  • Face/20_m.bmp
  • Face/21.bmp
  • Face/21_m.bmp
  • Face/22.bmp
  • Face/22_m.bmp
  • Face/23.bmp
  • Face/23_m.bmp
  • Face/24.bmp
  • Face/24_m.bmp
  • Face/25.bmp
  • Face/25_m.bmp
  • Face/26.bmp
  • Face/26_m.bmp
  • Face/27.bmp
  • Face/27_m.bmp
  • Face/28.bmp
  • Face/28_m.bmp
  • Face/29.bmp
  • Face/29_m.bmp
  • Face/2_m.bmp
  • Face/3.bmp
  • Face/30.bmp
  • Face/30_m.bmp
  • Face/31.bmp
  • Face/31_m.bmp
  • Face/32.bmp
  • Face/32_m.bmp
  • Face/33.bmp
  • Face/33_m.bmp
  • Face/34.bmp
  • Face/34_m.bmp
  • Face/35.bmp
  • Face/35_m.bmp
  • Face/36.bmp
  • Face/36_m.bmp
  • Face/37.bmp
  • Face/37_m.bmp
  • Face/38.bmp
  • Face/38_m.bmp
  • Face/39.bmp
  • Face/39_m.bmp
  • Face/3_m.bmp
  • Face/4.bmp
  • Face/40.bmp
  • Face/40_m.bmp
  • Face/41.bmp
  • Face/41_m.bmp
  • Face/42.bmp
  • Face/42_m.bmp
  • Face/43.bmp
  • Face/43_m.bmp
  • Face/44.bmp
  • Face/44_m.bmp
  • Face/45.bmp
  • Face/45_m.bmp
  • Face/46.bmp
  • Face/46_m.bmp
  • Face/47.bmp
  • Face/47_m.bmp
  • Face/48.bmp
  • Face/48_m.bmp
  • Face/49.bmp
  • Face/49_m.bmp
  • Face/4_m.bmp
  • Face/5.bmp
  • Face/50.bmp
  • Face/50_m.bmp
  • Face/51.bmp
  • Face/51_m.bmp
  • Face/52.bmp
  • Face/52_m.bmp
  • Face/53.bmp
  • Face/53_m.bmp
  • Face/54.bmp
  • Face/54_m.bmp
  • Face/55.bmp
  • Face/55_m.bmp
  • Face/56.bmp
  • Face/56_m.bmp
  • Face/57.bmp
  • Face/57_m.bmp
  • Face/58.bmp
  • Face/58_m.bmp
  • Face/59.bmp
  • Face/59_m.bmp
  • Face/5_m.bmp
  • Face/6.bmp
  • Face/60.bmp
  • Face/60_m.bmp
  • Face/6_m.bmp
  • Face/7.bmp
  • Face/7_m.bmp
  • Face/8.bmp
  • Face/8_m.bmp
  • Face/9.bmp
  • Face/9_m.bmp
  • FilterSetup.exe
    .exe windows:4 windows x86 arch:x86

    5c59bb0cad87a1d7610a8636d0706d56


    Headers

    Imports

    Sections

  • HYLog.log
  • HYRes.dll
    .dll windows:4 windows x86 arch:x86

    961ecc315984b17afe91536bd08efbae


    Headers

    Imports

    Sections

  • HYRes2.dll
    .dll windows:4 windows x86 arch:x86

    961ecc315984b17afe91536bd08efbae


    Headers

    Imports

    Sections

  • HYRes3.dll
    .dll windows:4 windows x86 arch:x86

    961ecc315984b17afe91536bd08efbae


    Headers

    Imports

    Sections

  • HYResc.dll
    .dll windows:4 windows x86 arch:x86

    961ecc315984b17afe91536bd08efbae


    Headers

    Imports

    Sections

  • HYRese.dll
    .dll windows:4 windows x86 arch:x86

    961ecc315984b17afe91536bd08efbae


    Headers

    Imports

    Sections

  • HYResoLD.dll
    .dll windows:4 windows x86 arch:x86

    904f82c431751875a15e09ee8eb43f20


    Headers

    Imports

    Sections

  • HyDesk.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b51a2e278dadaaea3a12e206a4cfffb4


    Headers

    Imports

    Exports

    Sections

  • HyResFanfan.dll
    .dll windows:4 windows x86 arch:x86

    4b8510ed7728f49059ec37467c4bda92


    Headers

    Imports

    Sections

  • HywRes.dll
    .dll windows:4 windows x86 arch:x86

    46039de89f8560750f5a6dacd1c7a453


    Headers

    Imports

    Sections

  • IPList.dat
  • K8.exe
    .exe windows:4 windows x86 arch:x86

    16bc4a49952fc83aa8ebeee70c6574d1


    Headers

    Imports

    Sections

  • KillUserBp.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Sections

  • MultiMedia.dll
    .dll windows:4 windows x86 arch:x86

    4abf3d74983af48fce20b02e1590883c


    Headers

    Imports

    Exports

    Sections

  • NetWork.dll
    .dll windows:4 windows x86 arch:x86

    4ec8369cdfc4568faa46a11ba6bb98c0


    Headers

    Imports

    Exports

    Sections

  • NetWorkParams.dat
  • NetWorkR.dll
    .dll windows:4 windows x86 arch:x86

    3ba5f32e7158059f2f2947dfe0308ae7


    Headers

    Imports

    Exports

    Sections

  • RN/default.rn
  • RN/µçÁ÷ÉùÔëÒô.rn
  • RN/ºôÎüÉùÔëÒô.rn
  • RN/¼âÈñÔëÒô.rn
  • RN/ʵʱ2.rn
  • RN/ʵʱÔëÒô.rn
  • RN/Ë»Éù.rn
  • RN/ÔÓÒôÔëÒô.rn
  • RN/×ÛºÏÔëÒô.rn
  • RN/×ÛºÏÔëÒô2.rn
  • SystemConfig.dat
  • filter/C4.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ab793b908b88842a5b82d12d27fa5f39


    Headers

    Imports

    Exports

    Sections

  • filter/CWDXPX1.dll
    .dll windows:4 windows x86 arch:x86

    0942b6de89fba5be417be689256c746e


    Headers

    Imports

    Exports

    Sections

  • filter/DeEsser.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5a49ee9725c33f4676cfdc0df50fc494


    Headers

    Imports

    Exports

    Sections

  • filter/Qn.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    11f60b48929b7ac05f9b42824f44890d


    Headers

    Imports

    Exports

    Sections

  • filter/Req.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    890569b6748e79ddee15e4a2e9c22569


    Headers

    Imports

    Exports

    Sections

  • filter/SonicMaximizer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7f0dbc3830fbc8bfe9ae7c767e8b04f1


    Headers

    Imports

    Exports

    Sections

  • filter/SuperTap.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0995b7bc822f222a680c8a25b4380340


    Headers

    Imports

    Exports

    Sections

  • filter/TubeDX.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a4a664f6e7772ee97a249b892a2a0d4a


    Headers

    Imports

    Exports

    Sections

  • filter/Waves.dll
    .dll windows:4 windows x86 arch:x86

    3377987ee71c81040d129aedf3f50860


    Headers

    Imports

    Exports

    Sections

  • filter/sonitus_r3.exe
    .exe windows:4 windows x86 arch:x86

    49d24e7dcaafe72d4ef90c3cbf907fcb


    Headers

    Imports

    Sections

  • filter/wavdest.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    3257140f27c5948ae0bbba9fa1327be8


    Headers

    Imports

    Exports

    Sections

  • id3lib.dll
    .dll windows:4 windows x86 arch:x86

    0921e1a208b1f6e496a5435edebe8d54


    Headers

    Imports

    Exports

    Sections

  • lame_enc.dll
    .dll windows:4 windows x86 arch:x86

    ad0d88d6af8c8d8feec4862473ad08c4


    Headers

    Imports

    Exports

    Sections

  • mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f9a6d48b4db89541699313524a5cdd4a


    Headers

    Imports

    Exports

    Sections

  • mu.exe
    .exe windows:4 windows x86 arch:x86

    a81fadf4fb6aa58f557a40a587c7e52d


    Headers

    Imports

    Sections

  • plugins/C4.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4ba57a376f9605d9153329b38854d17e


    Headers

    Imports

    Exports

    Sections

  • plugins/CWDXPX1.dll
    .dll windows:4 windows x86 arch:x86

    0942b6de89fba5be417be689256c746e


    Headers

    Imports

    Exports

    Sections

  • plugins/DeEsser.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d63b191da45f60e96337795e49383c95


    Headers

    Imports

    Exports

    Sections

  • plugins/LinEQ.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    8195b7bbbed42feacc447e87c842d02d


    Headers

    Imports

    Exports

    Sections

  • plugins/Plug-In Settings/C4 Settings.xps
  • plugins/Plug-In Settings/DeEsser Settings.xps
  • plugins/Plug-In Settings/LinEQ Settings.xps
  • plugins/SonicMaximizer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7f0dbc3830fbc8bfe9ae7c767e8b04f1


    Headers

    Imports

    Exports

    Sections

  • plugins/Waves5.0.DLL
    .dll windows:4 windows x86 arch:x86

    17595b1c77cf71d55b20fb39d13e9f1d


    Headers

    Imports

    Exports

    Sections

  • plugins/fxCompressor.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    da5bda0ef7f71fabba8f0f6e0bd891cc


    Headers

    Imports

    Exports

    Sections

  • plugins/fxReverb.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    890798f211764bc6b35a8d6e82e5a6c6


    Headers

    Imports

    Exports

    Sections

  • plugins/micmod.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/plugin Register.exe
    .exe windows:4 windows x86 arch:x86

    d019493d9bc8ad0d43849324ab814698


    Headers

    Imports

    Sections

  • plugins/wavdest.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    8eaff3cad78d5d99475fcc7de695b44f


    Headers

    Imports

    Exports

    Sections

  • start.mp3
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    4f2145f489d9c324280558d2e08c717d


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • update.dat
  • update.exe
    .exe windows:4 windows x86 arch:x86

    1d94854ebdc46527cc331b00a143ec03


    Headers

    Imports

    Sections

  • updatev2.dat
  • updatev2.dat0.txt
  • wav2wma.dll
    .dll windows:4 windows x86 arch:x86

    677002270485e5e5b8ca065e1ed41f18


    Headers

    Imports

    Exports

    Sections