General

  • Target

    341f1869dc31d51d168afcf20e6926d4_JaffaCakes118

  • Size

    12.0MB

  • MD5

    341f1869dc31d51d168afcf20e6926d4

  • SHA1

    2718d862ef5f9088780ee48593e6d134b2b27cfa

  • SHA256

    dafa201d49d5ccc7bf696755f84443ee0873336daed5271c93061caa6a26b914

  • SHA512

    60111abdca896793de82c69f03f53e32e0b467f6b08a70fb8e1173fb5269061cc6081023ac31618d37f39077fca555fe3e93bc5dbc02d4846a39bc6dfaf5535d

  • SSDEEP

    196608:phV1pMzHQCMFG9Vz2HGzcXOTIF1ZyMaJzjlam1nmY1xl3p5U7Dw307LzKgl8Uf:p3XMzaG9VzRcXThgPZmQDjevHJf

Score
10/10

Malware Config

Signatures

  • Detects Strela Stealer payload 1 IoCs
  • Strela family
  • Unsigned PE 40 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 341f1869dc31d51d168afcf20e6926d4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $COMMONFILES/VST3/FabFilter/FabFilter Micro.vst3
    .dll windows:5 windows x64 arch:x64

    727ceb0aea4c1a890162d27226058fe5


    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/VST3/FabFilter/FabFilter One.vst3
    .dll windows:5 windows x64 arch:x64

    78e4101c08e54532d0a57345ab4703e2


    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/VST3/FabFilter/FabFilter Pro-C.vst3
    .dll windows:5 windows x64 arch:x64

    5c01d0a1b84d3d75c3f37ce16ee2e194


    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/VST3/FabFilter/FabFilter Pro-G.vst3
    .dll windows:5 windows x64 arch:x64

    727ceb0aea4c1a890162d27226058fe5


    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/VST3/FabFilter/FabFilter Pro-L.vst3
    .dll windows:5 windows x64 arch:x64

    5c01d0a1b84d3d75c3f37ce16ee2e194


    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/VST3/FabFilter/FabFilter Pro-Q.vst3
    .dll windows:5 windows x64 arch:x64

    13e9bdf061d5fa54f74fe24f6369fa7b


    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/VST3/FabFilter/FabFilter Simplon.vst3
    .dll windows:5 windows x64 arch:x64

    727ceb0aea4c1a890162d27226058fe5


    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/VST3/FabFilter/FabFilter Timeless 2.vst3
    .dll windows:5 windows x64 arch:x64

    3c9a114a0bef90b27b2a1dedb8c742ee


    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/VST3/FabFilter/FabFilter Twin 2.vst3
    .dll windows:5 windows x64 arch:x64

    354a95c0a0ff8b81e46989afb334addc


    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/VST3/FabFilter/FabFilter Volcano 2.vst3
    .dll windows:5 windows x64 arch:x64

    5c01d0a1b84d3d75c3f37ce16ee2e194


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:5 windows x86 arch:x86

    fb1aa2bbc159c94cb45792330366bd5f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll
    .dll windows:4 windows x86 arch:x86

    8a595235c826f2ae0f0362f688723bd0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/dat_bgm.ogg
  • $PLUGINSDIR/dat_skin.skf
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/splash.bmp
  • Micro/FabFilter Micro (Mono).dll
    .dll windows:5 windows x64 arch:x64

    727ceb0aea4c1a890162d27226058fe5


    Headers

    Imports

    Exports

    Sections

  • Micro/FabFilter Micro.chm
    .chm
  • Micro/FabFilter Micro.dll
    .dll windows:5 windows x64 arch:x64

    727ceb0aea4c1a890162d27226058fe5


    Headers

    Imports

    Exports

    Sections

  • Micro/Readme.txt
  • One/FabFilter One.chm
    .chm
  • One/FabFilter One.dll
    .dll windows:5 windows x64 arch:x64

    78e4101c08e54532d0a57345ab4703e2


    Headers

    Imports

    Exports

    Sections

  • One/Readme.txt
  • Pro-C/FabFilter Pro-C (Mono SC).dll
    .dll windows:5 windows x64 arch:x64

    5c01d0a1b84d3d75c3f37ce16ee2e194


    Headers

    Imports

    Exports

    Sections

  • Pro-C/FabFilter Pro-C (Mono).dll
    .dll windows:5 windows x64 arch:x64

    5c01d0a1b84d3d75c3f37ce16ee2e194


    Headers

    Imports

    Exports

    Sections

  • Pro-C/FabFilter Pro-C (SC).dll
    .dll windows:5 windows x64 arch:x64

    5c01d0a1b84d3d75c3f37ce16ee2e194


    Headers

    Imports

    Exports

    Sections

  • Pro-C/FabFilter Pro-C.chm
    .chm
  • Pro-C/FabFilter Pro-C.dll
    .dll windows:5 windows x64 arch:x64

    5c01d0a1b84d3d75c3f37ce16ee2e194


    Headers

    Imports

    Exports

    Sections

  • Pro-C/Readme.txt
  • Pro-G/FabFilter Pro-G (Mono).dll
    .dll windows:5 windows x64 arch:x64

    727ceb0aea4c1a890162d27226058fe5


    Headers

    Imports

    Exports

    Sections

  • Pro-G/FabFilter Pro-G.chm
    .chm
  • Pro-G/FabFilter Pro-G.dll
    .dll windows:5 windows x64 arch:x64

    727ceb0aea4c1a890162d27226058fe5


    Headers

    Imports

    Exports

    Sections

  • Pro-G/Readme.txt
  • Pro-L/FabFilter Pro-L (Mono).dll
    .dll windows:5 windows x64 arch:x64

    5c01d0a1b84d3d75c3f37ce16ee2e194


    Headers

    Imports

    Exports

    Sections

  • Pro-L/FabFilter Pro-L.chm
    .chm
  • Pro-L/FabFilter Pro-L.dll
    .dll windows:5 windows x64 arch:x64

    5c01d0a1b84d3d75c3f37ce16ee2e194


    Headers

    Imports

    Exports

    Sections

  • Pro-L/Readme.txt
  • Pro-Q/FabFilter Pro-Q (Mono).dll
    .dll windows:5 windows x64 arch:x64

    13e9bdf061d5fa54f74fe24f6369fa7b


    Headers

    Imports

    Exports

    Sections

  • Pro-Q/FabFilter Pro-Q.chm
    .chm
  • Pro-Q/FabFilter Pro-Q.dll
    .dll windows:5 windows x64 arch:x64

    13e9bdf061d5fa54f74fe24f6369fa7b


    Headers

    Imports

    Exports

    Sections

  • Pro-Q/Readme.txt
  • Simplon/FabFilter Simplon.chm
    .chm
  • Simplon/FabFilter Simplon.dll
    .dll windows:5 windows x64 arch:x64

    727ceb0aea4c1a890162d27226058fe5


    Headers

    Imports

    Exports

    Sections

  • Simplon/Readme.txt
  • Timeless 2/FabFilter Timeless 2 (SC).dll
    .dll windows:5 windows x64 arch:x64

    3c9a114a0bef90b27b2a1dedb8c742ee


    Headers

    Imports

    Exports

    Sections

  • Timeless 2/FabFilter Timeless 2.chm
    .chm
  • Timeless 2/FabFilter Timeless 2.dll
    .dll windows:5 windows x64 arch:x64

    3c9a114a0bef90b27b2a1dedb8c742ee


    Headers

    Imports

    Exports

    Sections

  • Timeless 2/Readme.txt
  • Twin 2/FabFilter Twin 2.chm
    .chm
  • Twin 2/FabFilter Twin 2.dll
    .dll windows:5 windows x64 arch:x64

    354a95c0a0ff8b81e46989afb334addc


    Headers

    Imports

    Exports

    Sections

  • Twin 2/Readme.txt
  • Volcano 2/FabFilter Volcano 2 (Mono SC).dll
    .dll windows:5 windows x64 arch:x64

    5c01d0a1b84d3d75c3f37ce16ee2e194


    Headers

    Imports

    Exports

    Sections

  • Volcano 2/FabFilter Volcano 2 (Mono).dll
    .dll windows:5 windows x64 arch:x64

    5c01d0a1b84d3d75c3f37ce16ee2e194


    Headers

    Imports

    Exports

    Sections

  • Volcano 2/FabFilter Volcano 2 (SC).dll
    .dll windows:5 windows x64 arch:x64

    5c01d0a1b84d3d75c3f37ce16ee2e194


    Headers

    Imports

    Exports

    Sections

  • Volcano 2/FabFilter Volcano 2.chm
    .chm
  • Volcano 2/FabFilter Volcano 2.dll
    .dll windows:5 windows x64 arch:x64

    5c01d0a1b84d3d75c3f37ce16ee2e194


    Headers

    Imports

    Exports

    Sections

  • Volcano 2/Readme.txt
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections