Overview

overview

7

Static

static

3

2e7830cabc...18.exe

windows7-x64

3

2e7830cabc...18.exe

windows10-2004-x64

3

$PLUGINSDI...t3.dll

windows7-x64

3

$PLUGINSDI...t3.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

1

$PLUGINSDI...te.dll

windows10-2004-x64

1

MV_Song.exe

windows7-x64

1

MV_Song.exe

windows10-2004-x64

1

mvsongAX.dll

windows7-x64

3

mvsongAX.dll

windows10-2004-x64

3

skin/uninstall.exe

windows7-x64

7

skin/uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...t3.dll

windows7-x64

3

$PLUGINSDI...t3.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

1

$PLUGINSDI...ll.dll

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

you.html

windows7-x64

1

you.html

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e7830cabcf8af7c7e5ec9df924ceeec_JaffaCakes118

  • Size

    681KB

  • MD5

    2e7830cabcf8af7c7e5ec9df924ceeec

  • SHA1

    c469bfe197ec7d1a976202dd7cfb1c76c62d7981

  • SHA256

    cfd3bf35f252a34922d6514e20df8b844f9a3a6487f0f2a4a48fd86777d811a8

  • SHA512

    aa71682da1d3ca189e1130720f5f61096a8f4f4efedf1ea954fc7c44c1811dc1753def04a86b370ecffbadab7ef634213fca62b3ee6a20e68aa696355ffb5943

  • SSDEEP

    12288:AyExDZTJ5kO8GVQGiaVQS7oznKd3Z0AWF3UiPnhxDQJJ8YaZf7Qb9WiigH:sDZbkO8LGJEo3ZZWFD0JITQb8iXH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 2e7830cabcf8af7c7e5ec9df924ceeec_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLCount3.dll
    .dll windows:4 windows x86 arch:x86

    81cd08b6b73b740baf5bcdd2ed9e40d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • MV_Song.exe
    .exe windows:4 windows x86 arch:x86

    91ab39228aa51de3b873501a2b2f0ba3


    Headers

    Imports

    Sections

  • mvsongAX.inf
  • mvsongAX.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    dce7e063ca1e3ac1416bfb06b2df2e55


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mvsong_icon.ico
  • skin/bg_bottom_center.bmp
  • skin/bg_bottom_left.bmp
  • skin/bg_bottom_right.bmp
  • skin/bg_connectno.bmp
  • skin/bg_dot.bmp
  • skin/bg_left.bmp
  • skin/bg_menu.bmp
  • skin/bg_right.bmp
  • skin/bg_top_center.bmp
  • skin/bg_top_left.bmp
  • skin/bg_top_right.bmp
  • skin/bottom_bg.bmp
  • skin/bottom_left.bmp
  • skin/bottom_right.bmp
  • skin/center_bg_dot.bmp
  • skin/colon1.bmp
  • skin/left_bg.bmp
  • skin/list_title_bg.bmp
  • skin/list_title_left.bmp
  • skin/list_title_right.bmp
  • skin/mvsong_logo.bmp
  • skin/mvsong_skin.bmp
  • skin/number0.bmp
  • skin/number1.bmp
  • skin/number2.bmp
  • skin/number3.bmp
  • skin/number4.bmp
  • skin/number5.bmp
  • skin/number6.bmp
  • skin/number7.bmp
  • skin/number8.bmp
  • skin/number9.bmp
  • skin/play01_on.bmp
  • skin/play02_on.bmp
  • skin/play03_on.bmp
  • skin/play_controler.bmp
  • skin/playlist_bg.bmp
  • skin/playlist_left.bmp
  • skin/playlist_right.bmp
  • skin/right_bg.bmp
  • skin/seach_bg.bmp
  • skin/search_bg.bmp
  • skin/search_left.bmp
  • skin/search_right.bmp
  • skin/skin_bg01.bmp
  • skin/top_bg.bmp
  • skin/top_left.bmp
  • skin/top_right.bmp
  • skin/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLCount3.dll
    .dll windows:4 windows x86 arch:x86

    81cd08b6b73b740baf5bcdd2ed9e40d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    144dfc1dead6dbf5082de448c187851b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • skin/volume10.bmp
  • skin/volume100.bmp
  • skin/volume40.bmp
  • skin/volume50.bmp
  • skin/volume60.bmp
  • skin/volume70.bmp
  • skin/volume80.bmp
  • skin/volume90.bmp
  • skin/volume_bar_bg.bmp
  • skin/volume_bar_left.bmp
  • skin/volume_bar_right.bmp
  • skin/volume_controler.bmp
  • you.html
    .js