Overview

overview

7

Static

static

3

aSetup.exe

windows7-x64

7

aSetup.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDIR/nsWeb.dll

windows7-x64

3

$PLUGINSDIR/nsWeb.dll

windows10-2004-x64

3

$SYSDIR/NC...r2.dll

windows7-x64

1

$SYSDIR/NC...r2.dll

windows10-2004-x64

1

$SYSDIR/NC...n2.dll

windows7-x64

1

$SYSDIR/NC...n2.dll

windows10-2004-x64

1

$SYSDIR/NC...y2.dll

windows7-x64

1

$SYSDIR/NC...y2.dll

windows10-2004-x64

1

$SYSDIR/NC...r2.dll

windows7-x64

1

$SYSDIR/NC...r2.dll

windows10-2004-x64

1

$SYSDIR/NC...e2.dll

windows7-x64

1

$SYSDIR/NC...e2.dll

windows10-2004-x64

1

$SYSDIR/NC...n2.dll

windows7-x64

1

$SYSDIR/NC...n2.dll

windows10-2004-x64

1

$SYSDIR/NC...r2.dll

windows7-x64

1

$SYSDIR/NC...r2.dll

windows10-2004-x64

1

$SYSDIR/NC...d2.dll

windows7-x64

1

$SYSDIR/NC...d2.dll

windows10-2004-x64

1

$SYSDIR/NC...m2.dll

windows7-x64

1

$SYSDIR/NC...m2.dll

windows10-2004-x64

1

$SYSDIR/NC...n2.dll

windows7-x64

1

$SYSDIR/NC...n2.dll

windows10-2004-x64

1

$SYSDIR/NC...e2.dll

windows7-x64

1

$SYSDIR/NC...e2.dll

windows10-2004-x64

1

$TEMP/fzha/db.exe

windows7-x64

7

$TEMP/fzha/db.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1619d67e55a8154b165c2a05c431e9e0_JaffaCakes118

  • Size

    6.9MB

  • MD5

    1619d67e55a8154b165c2a05c431e9e0

  • SHA1

    90648b28cc6e2401f81211835f655e8759dfb102

  • SHA256

    19c9e47758c6139763d2396d86ec67bdd3299c89fc0106a8adf854f3d295735e

  • SHA512

    651a166591583b4a39b6b8477137b9dde54683e543196ceaddf439ecee39a03f644bbb9d48f58391abf061b5f25a7784d36835d096e85b22b8931094b4c9a888

  • SSDEEP

    196608:/rV7gGwZL/HoUA6163YfHsMrQML7WuocVc2T7TE:jV7gGuEAdsM//9to

Score
3/10

Malware Config

Signatures

  • Unsigned PE 34 IoCs

    Checks for missing Authenticode signature.

Files

  • 1619d67e55a8154b165c2a05c431e9e0_JaffaCakes118
    .rar
  • aSetup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsWeb.dll
    .dll windows:4 windows x86 arch:x86

    d12ed83df3a4aa87887f14a225ff95d4


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/NCTAudioCDGrabber2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c18860b50b776a3bd730d7f0df095305


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/NCTAudioDesign2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a456ed385d1ddc38164d120d5e2c13e1


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/NCTAudioDisplay2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b441bc9ce95912bf9677ce19c7269696


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/NCTAudioEditor2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c970d20ae88c6c5e2b2bdfc354261b23


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/NCTAudioFile2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f1a0b7b00ba369e293a28b9b489caec8


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/NCTAudioInformation2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f0552079af00d7622ef38e78ad8da41c


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/NCTAudioPlayer2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    64af346d28970dfd85f44cc89e948ec2


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/NCTAudioRecord2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e42a0ad4b4393c1c590cd1935a2e4390


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/NCTAudioTransform2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6a3784a425278328dafec8d2a870180b


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/NCTAudioVisualization2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d2512d18fe392c087e3d9dd466791e84


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/NCTWMAFile2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4a0c0465609264ebea8243f258356dab


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/NCTWMAProfiles.prx
  • $TEMP/fzha/db.exe
    .exe windows:5 windows x86 arch:x86

    c56a25fa4336eeb10723b3537ba4876d


    Headers

    Imports

    Sections

  • $TEMP/fzha/qqbq.exe
    .exe windows:4 windows x86 arch:x86

    1bed3305885b0ca596d9cbba22baf78a


    Headers

    Imports

    Sections

  • LANGRES/english.ini
  • LANGRES/type_english.dat
  • NCTAudioCDGrabber2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c18860b50b776a3bd730d7f0df095305


    Headers

    Imports

    Exports

    Sections

  • NCTAudioDesign2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a456ed385d1ddc38164d120d5e2c13e1


    Headers

    Imports

    Exports

    Sections

  • NCTAudioDisplay2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b441bc9ce95912bf9677ce19c7269696


    Headers

    Imports

    Exports

    Sections

  • NCTAudioEditor2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c970d20ae88c6c5e2b2bdfc354261b23


    Headers

    Imports

    Exports

    Sections

  • NCTAudioFile2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f1a0b7b00ba369e293a28b9b489caec8


    Headers

    Imports

    Exports

    Sections

  • NCTAudioInformation2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f0552079af00d7622ef38e78ad8da41c


    Headers

    Imports

    Exports

    Sections

  • NCTAudioPlayer2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    64af346d28970dfd85f44cc89e948ec2


    Headers

    Imports

    Exports

    Sections

  • NCTAudioRecord2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e42a0ad4b4393c1c590cd1935a2e4390


    Headers

    Imports

    Exports

    Sections

  • NCTAudioTransform2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6a3784a425278328dafec8d2a870180b


    Headers

    Imports

    Exports

    Sections

  • NCTAudioVisualization2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d2512d18fe392c087e3d9dd466791e84


    Headers

    Imports

    Exports

    Sections

  • NCTWMAFile2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4a0c0465609264ebea8243f258356dab


    Headers

    Imports

    Exports

    Sections

  • NCTWMAProfiles.prx
  • Presets/Amplify_english.ini
  • Presets/Amplify_french.ini
  • Presets/BandPass_english.ini
  • Presets/BandPass_french.ini
  • Presets/Chorus_english.ini
  • Presets/Chorus_french.ini
  • Presets/Compressor_english.ini
  • Presets/Compressor_french.ini
  • Presets/DelSilence_english.ini
  • Presets/DelSilence_french.ini
  • Presets/Delay_english.ini
  • Presets/Delay_french.ini
  • Presets/Expander_english.ini
  • Presets/Expander_french.ini
  • Presets/Flanger_english.ini
  • Presets/Flanger_french.ini
  • Presets/HighPass_english.ini
  • Presets/HighPass_french.ini
  • Presets/HighShelf_english.ini
  • Presets/HighShelf_french.ini
  • Presets/LowPass_english.ini
  • Presets/LowPass_french.ini
  • Presets/LowShelf_english.ini
  • Presets/LowShelf_french.ini
  • Presets/MixChannels_english.ini
  • Presets/MixChannels_french.ini
  • Presets/Normalize_english.ini
  • Presets/Normalize_french.ini
  • Presets/NotchFilter_english.ini
  • Presets/NotchFilter_french.ini
  • Presets/PeakEQ_english.ini
  • Presets/PeakEQ_french.ini
  • Presets/Phaser_english.ini
  • Presets/Phaser_french.ini
  • Presets/PitchShift_english.ini
  • Presets/PitchShift_french.ini
  • Presets/Reverb_english.ini
  • Presets/Reverb_french.ini
  • Presets/StretchTime_english.ini
  • Presets/StretchTime_french.ini
  • Presets/Trim_english.ini
  • Presets/Trim_french.ini
  • Presets/Vibrato_english.ini
  • Presets/Vibrato_french.ini
  • Splash.bmp
  • Tahoma.exe
    .exe windows:4 windows x86 arch:x86

    3c0e70bfa5f73f1f1cef484e2bcb5bf8


    Headers

    Imports

    Sections

  • $FONTS/TAHOMA.TTF
  • $PLUGINSDIR/fonts.dll
    .dll windows:4 windows x86 arch:x86

    f8db6c31ab1abbef252ef1e2bb88f7d7


    Headers

    Imports

    Exports

    Sections

  • ae.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • help.chm
    .chm
  • info.ini
  • lame_enc.dll
    .dll windows:4 windows x86 arch:x86

    3416d0b6a731a0482c17ba3536b85366


    Headers

    Imports

    Exports

    Sections

  • license.txt
  • msvcr70.dll
    .dll windows:4 windows x86 arch:x86

    1042bb30696d4426da7447f341f51a6e


    Headers

    Imports

    Exports

    Sections

  • readme.txt
  • uninst.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • wmfdist.exe
    .exe windows:5 windows x86 arch:x86

    1494de9b53e05fc1f40cb92afbdd6ce4


    Code Sign

    Headers

    Imports

    Sections

  • ºº»¯Blog.url
  • ºº»¯ËµÃ÷.txt
  • ºÏ×÷.rtf
    .rtf
  • 使用说明.txt
  • 安装说明.url
    .url
  • 汉化说明.txt