General

  • Target

    250b80d8172eccf6cacb7ce1f3bd95bf_JaffaCakes118

  • Size

    1.9MB

  • MD5

    250b80d8172eccf6cacb7ce1f3bd95bf

  • SHA1

    db257cdccc1b5540b4726f3721cb51111425aa27

  • SHA256

    ac6d2a3f8e4f2112127f05a68879b034e75d533aaf829de6cc7fd4c6ec237d00

  • SHA512

    1978d0e375aa66d6153c61b2e2a971d8a442487be26bd4d81b16eea3ebc0e00f5f94b4c3bd957cbb70cb5ce6409f7151ecb361e44c88f4f33cb2dfed161cbfc8

  • SSDEEP

    49152:AIEeusc/oouzZkQkOU5hrVBsx5T1uSMiR6TFGmpm:A3sI+khlsx5TbNUFGQm

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 250b80d8172eccf6cacb7ce1f3bd95bf_JaffaCakes118
    .rar
  • zidianMP3qj-v11.5I.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $DESKTOP/ϵ.url
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • M4.exe
    .exe windows:4 windows x86 arch:x86

    9c51a81c62b0cd8050e46d4821dd31c0


    Headers

    Imports

    Sections

  • Mp3Cut.dll
  • Mp3Cut.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • Mp3Cut.exe.manifest
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • cmd/ab
  • cmd/mpg
  • help.chm
    .chm
  • help.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • js32.dll
    .dll windows:4 windows x86 arch:x86

    8a4081abc2c833f164926e41bfa8b681


    Headers

    Imports

    Exports

    Sections

  • readme.txt
  • web.url
  • 新云软件.url
    .url