General

  • Target

    691cf0e6954a6813726080942a02a3c5_JaffaCakes118

  • Size

    6.3MB

  • MD5

    691cf0e6954a6813726080942a02a3c5

  • SHA1

    006f289c56b7429cc10a29b5a47428b11c7f4764

  • SHA256

    ec8462f1bab8e0b95e37079d4714985fabd1d56579d354ccca26f7f1bc032528

  • SHA512

    aa67b26307764f86eb321c453b15e19e383bf88686f4fc86218dc98be77c61545870cc60ec82d938013a9f34d37aa44b70b0e9cf07ebc5e4e03da8a67136e20e

  • SSDEEP

    196608:j6PN9W4wd3gFJ9PUSmQGxMNKMg21+41MRkG/Cm:+PC9xgvBmQiMNNkf/D

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 16 IoCs

    Detects file using ACProtect software.

  • UPX packed file 17 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 27 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 691cf0e6954a6813726080942a02a3c5_JaffaCakes118
    .rar
  • FILE_ID.DIZ
  • LICENSE.TXT
  • aedtools_install.exe
    .exe windows:4 windows x86 arch:x86

    1433f2e02f7db60c6c8547c52a3f8504


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    1f4c4faa2a5228733f7ee5edf40f6693


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/authdvd.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $SYSDIR/ntaspi32.dll
    .dll windows:4 windows x86 arch:x86

    359f7c431bd2e36fca441bf86f72924c


    Headers

    Imports

    Exports

    Sections

  • FILE_ID.DIZ
  • LICENSE.TXT
  • MainCore.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • MediaTwins official web site.url
    .url
  • MediaTwins technical support online.url
    .url
  • Plugins/IDTagger.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/In/AC3Input.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Plugins/In/MP3 and mp3PRO Decoder.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/In/Vorbis Decoder.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Plugins/In/WMAInput.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/In/Waveform Decoder.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/Out/MpegLame.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/Out/OggVorbis.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/Out/PCMOut.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/Out/WMAOut.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/Out/lame/lame392.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • aedtools.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • aedtools.exe.manifest
    .xml
  • akrip.dll
    .dll windows:4 windows x86 arch:x86

    45ec67e481ab8a31b9aa41506bba08e1


    Headers

    Imports

    Exports

    Sections

  • cddb.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • cddbdll.dll
    .dll windows:4 windows x86 arch:x86

    3269b0b17f7531e4d835464274ad546d


    Headers

    Imports

    Exports

    Sections

  • freshupdate.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • help/aedtls.chm
    .chm
  • help/akrip/AKRip CD-DA Audio Extraction Library.url
    .url
  • help/akrip/lgpl.txt
  • help/akrip/readme-akrip.txt
  • id3lib.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • langres.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • official page.url
    .url
  • sections.xml
    .xml
  • settings.ini
  • setup_left.bmp
  • setup_top.bmp
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    1433f2e02f7db60c6c8547c52a3f8504


    Headers

    Imports

    Sections

  • wmfadist.exe
    .exe windows:5 windows x86 arch:x86

    1494de9b53e05fc1f40cb92afbdd6ce4


    Code Sign

    Headers

    Imports

    Sections

  • 下载说明.htm
    .html .js polyglot