General

  • Target

    3c078e3c3cbf809b35df990193e93cab_JaffaCakes118

  • Size

    1.1MB

  • MD5

    3c078e3c3cbf809b35df990193e93cab

  • SHA1

    90b95ef2adf1210e3ac92b735688399e1ab91930

  • SHA256

    545d8048d51dc399611295fa842c8b0695eee9cd213e9b523a3c654b2f7651be

  • SHA512

    e80a3bb2cc4d63e80c2918a3f73a24b2e2bf4bf41e6462100b53cc143105e7b0534f47f7acd31510b650d34d20ce6798665eaca8cec55bb29b5de2a8bf5c0255

  • SSDEEP

    24576:bDNnuB4rghdgXqUBeHSx85qsnCppF6jFwEC:bcB4rKO/2Se5qsYP66EC

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 3c078e3c3cbf809b35df990193e93cab_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWaitForKillProgram.dll
    .dll windows:4 windows x86 arch:x86

    2e92645153848ef99816d61ac6e2a921


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    324e87a129b7b2af320238c8ab284874


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IPCheckMfc.dll
    .dll windows:4 windows x86 arch:x86

    21a57532e154ea21f11850b4480a4b88


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    922b855d216a21490e4bcbf6c29b7f7d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • DWLib.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • image/Thumbs.db
  • image/btn_ question_default.bmp
  • image/btn_ question_down.bmp
  • image/btn_ question_over.bmp
  • image/btn_blog_default.bmp
  • image/btn_blog_down.bmp
  • image/btn_blog_over.bmp
  • image/btn_list_allcancel.bmp
  • image/btn_list_allcancel_down.bmp
  • image/btn_list_allcancel_over.bmp
  • image/btn_list_allcheck_default.bmp
  • image/btn_list_allcheck_down.bmp
  • image/btn_list_allcheck_over.bmp
  • image/btn_list_down_default.bmp
  • image/btn_list_down_down.bmp
  • image/btn_list_down_over.bmp
  • image/btn_list_minus.bmp
  • image/btn_list_minus_down.bmp
  • image/btn_list_minus_over.bmp
  • image/btn_list_plus.bmp
  • image/btn_list_plus_down.bmp
  • image/btn_list_plus_over.bmp
  • image/btn_list_up_default.bmp
  • image/btn_list_up_down.bmp
  • image/btn_list_up_over.bmp
  • image/btn_searchresult_default.bmp
  • image/btn_searchresult_down.bmp
  • image/btn_searchresult_over.bmp
  • image/btn_words_default.bmp
  • image/btn_words_down.bmp
  • image/btn_words_over.bmp
  • image/button_search_default.bmp
  • image/button_search_down.bmp
  • image/button_search_over.bmp
  • image/lcd_big_number_0.bmp
  • image/lcd_big_number_1.bmp
  • image/lcd_big_number_2.bmp
  • image/lcd_big_number_3.bmp
  • image/lcd_big_number_4.bmp
  • image/lcd_big_number_5.bmp
  • image/lcd_big_number_6.bmp
  • image/lcd_big_number_7.bmp
  • image/lcd_big_number_8.bmp
  • image/lcd_big_number_9.bmp
  • image/lcd_big_number_small_0.bmp
  • image/lcd_big_number_small_1.bmp
  • image/lcd_big_number_small_2.bmp
  • image/lcd_big_number_small_3.bmp
  • image/lcd_big_number_small_4.bmp
  • image/lcd_big_number_small_5.bmp
  • image/lcd_big_number_small_6.bmp
  • image/lcd_big_number_small_7.bmp
  • image/lcd_big_number_small_8.bmp
  • image/lcd_big_number_small_9.bmp
  • image/lcd_btn_1repet_default.bmp
  • image/lcd_btn_1repet_down.bmp
  • image/lcd_btn_1repet_over.bmp
  • image/lcd_btn_repeat_default.bmp
  • image/lcd_btn_repeat_down.bmp
  • image/lcd_btn_repeat_over.bmp
  • image/lcd_btn_shuffle_off_default.bmp
  • image/lcd_btn_shuffle_off_down.bmp
  • image/lcd_btn_shuffle_off_over.bmp
  • image/lcd_btn_shuffle_on_default.bmp
  • image/lcd_btn_shuffle_on_down.bmp
  • image/lcd_btn_shuffle_on_over.bmp
  • image/lcd_btn_unlimit_default.bmp
  • image/lcd_btn_unlimit_down.bmp
  • image/lcd_btn_unlimit_over.bmp
  • image/lcd_icon_spec.bmp
  • image/lcd_spec_ground.bmp
  • image/line01_center_dot.bmp
  • image/line01_left.bmp
  • image/line01_right.bmp
  • image/line02_center_dot.bmp
  • image/line02_left.bmp
  • image/line02_right.bmp
  • image/line03_center_dot.bmp
  • image/line03_left.bmp
  • image/line03_right.bmp
  • image/line04_center_dot.bmp
  • image/line04_left.bmp
  • image/line04_right.bmp
  • image/line05_center_dot.bmp
  • image/line05_centerlist_dot.bmp
  • image/line05_left.bmp
  • image/line05_left_dot.bmp
  • image/line05_right.bmp
  • image/line05_right_dot.bmp
  • image/list_btn_next_default.bmp
  • image/list_btn_next_down.bmp
  • image/list_btn_next_unable.bmp
  • image/list_btn_prev_default.bmp
  • image/list_btn_prev_down.bmp
  • image/list_btn_prev_unable.bmp
  • image/list_subject_bar_girth.bmp
  • image/list_subject_dot.bmp
  • image/list_subject_dot_over.bmp
  • image/list_tap_bg_dot.bmp
  • image/list_tap_btn_close.bmp
  • image/list_tap_btn_close_dow.bmp
  • image/list_tap_btn_close_over.bmp
  • image/list_tap_btn_next_default.bmp
  • image/list_tap_btn_next_down.bmp
  • image/list_tap_btn_next_over.bmp
  • image/list_tap_btn_next_unable.bmp
  • image/list_tap_btn_prev_default.bmp
  • image/list_tap_btn_prev_over.bmp
  • image/list_tap_btn_prev_unable.bmp
  • image/list_tap_btn_priv_down.bmp
  • image/list_tap_center_dot.bmp
  • image/list_tap_down_center_dot.bmp
  • image/list_tap_down_left.bmp
  • image/list_tap_down_right.bmp
  • image/list_tap_left.bmp
  • image/list_tap_over_center_dot.bmp
  • image/list_tap_over_left.bmp
  • image/list_tap_over_right.bmp
  • image/list_tap_right.bmp
  • image/listskin/Thumbs.db
  • image/listskin/list_bg_hor.bmp
  • image/listskin/list_bg_ver.bmp
  • image/listskin/list_btbottom.bmp
  • image/listskin/list_btbottom_center.bmp
  • image/listskin/list_btbottom_center_left.bmp
  • image/listskin/list_btbottom_center_pixel.bmp
  • image/listskin/list_btbottom_center_right.bmp
  • image/listskin/list_btbottom_left.bmp
  • image/listskin/list_btbottom_right.bmp
  • image/listskin/list_btcenter.bmp
  • image/listskin/list_btcenter_bottom.bmp
  • image/listskin/list_btcenter_pixel.bmp
  • image/listskin/list_btcenter_top.bmp
  • image/listskin/list_bttop.bmp
  • image/listskin/list_checkbox_allcancel.bmp
  • image/listskin/list_checkbox_allcheck.bmp
  • image/listskin/list_checkbox_allcheck_mymusic.bmp
  • image/listskin/list_checkbox_no.bmp
  • image/listskin/list_checkbox_title_allcancel.bmp
  • image/listskin/list_checkbox_title_allcheck.bmp
  • image/listskin/list_subject_bg.bmp
  • image/listskin/list_subject_bg2.bmp
  • image/listskin/list_subject_bg_over.bmp
  • image/logo_default.bmp
  • image/logo_over.bmp
  • image/player_bt_volumeLine_minus.bmp
  • image/player_bt_volumeLine_minus_down.bmp
  • image/player_bt_volumeLine_minus_over.bmp
  • image/player_bt_volumeLine_plus.bmp
  • image/player_bt_volumeLine_plus_down.bmp
  • image/player_bt_volumeLine_plus_over.bmp
  • image/player_btback_default.bmp
  • image/player_btback_down.bmp
  • image/player_btback_over.bmp
  • image/player_btclose_default.bmp
  • image/player_btclose_down.bmp
  • image/player_btclose_over.bmp
  • image/player_btff_default.bmp
  • image/player_btff_down.bmp
  • image/player_btff_over.bmp
  • image/player_btmini_default.bmp
  • image/player_btmini_down.bmp
  • image/player_btmini_over.bmp
  • image/player_btopen_default.bmp
  • image/player_btopen_down.bmp
  • image/player_btopen_over.bmp
  • image/player_btplay_default.bmp
  • image/player_btplay_down.bmp
  • image/player_btplay_over.bmp
  • image/player_btreduction_default.bmp
  • image/player_btreduction_down.bmp
  • image/player_btreduction_over.bmp
  • image/player_btsound_Off_default.bmp
  • image/player_btsound_Off_down.bmp
  • image/player_btsound_Off_over.bmp
  • image/player_btsound_On_default.bmp
  • image/player_btsound_On_down.bmp
  • image/player_btsound_On_over.bmp
  • image/player_btstop_default.bmp
  • image/player_btstop_down.bmp
  • image/player_btstop_over.bmp
  • image/player_btwait_default.bmp
  • image/player_btwait_down.bmp
  • image/player_btwait_over.bmp
  • image/player_image_timeLine_botton.bmp
  • image/player_image_timeLine_empty.bmp
  • image/player_image_timeLine_full.bmp
  • image/player_image_timeLine_left.bmp
  • image/player_image_timeLine_right.bmp
  • image/player_image_volumeLine.bmp
  • image/player_image_volumeLine_full.BMP
  • image/player_image_volumeLine_left.bmp
  • image/player_image_volumeLine_right.BMP
  • onmuz.exe
    .exe windows:4 windows x86 arch:x86

    1985a1900211cc54dd3dc3855430ab12


    Headers

    Imports

    Sections

  • onmuzupdate.exe
    .exe windows:4 windows x86 arch:x86

    5fc8abba415b24db671c7abe88f672b6


    Headers

    Imports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    324e87a129b7b2af320238c8ab284874


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FRNDelete.dll
    .dll windows:4 windows x86 arch:x86

    eacc283400b4c9fd7e2c19bddba71711


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    922b855d216a21490e4bcbf6c29b7f7d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp