Overview

overview

7

Static

static

3

aa262baafa...18.exe

windows7-x64

3

aa262baafa...18.exe

windows10-2004-x64

3

$PLUGINSDI...t3.dll

windows7-x64

3

$PLUGINSDI...t3.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

3

$PLUGINSDI...te.dll

windows10-2004-x64

3

MV_Song.exe

windows7-x64

3

MV_Song.exe

windows10-2004-x64

3

mvsongAX.dll

windows7-x64

3

mvsongAX.dll

windows10-2004-x64

3

skin/uninstall.exe

windows7-x64

7

skin/uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...t3.dll

windows7-x64

3

$PLUGINSDI...t3.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

you.html

windows7-x64

3

you.html

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa262baafa986ae994d5bc189eb5da4c_JaffaCakes118

  • Size

    673KB

  • MD5

    aa262baafa986ae994d5bc189eb5da4c

  • SHA1

    ec0f8b731057223a2fdd9ae1c75db6721ca229f8

  • SHA256

    2d9431bfca79e0d6dd11c248f876ac92ec97a4e748506e625516fc22cd62b79f

  • SHA512

    c039e33c1685121538c5c11785e2d4e5610bef50e9ae63f75824d495b34fee8a42012aff7fb3dea24ef3c7b33a52d3b5dcd26f9650442cae4be8a663784bb344

  • SSDEEP

    12288:AWwWTqP3uaCLRCJAqo3t0y+eOeybjqU2iPXV6ninYrBAHDldDBxTwvEPcRv:/RqP+aCVWjjy+eOeMqin6+/WEPcZ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • aa262baafa986ae994d5bc189eb5da4c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLCount3.dll
    .dll windows:4 windows x86 arch:x86

    81cd08b6b73b740baf5bcdd2ed9e40d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • MV_Song.exe
    .exe windows:4 windows x86 arch:x86

    cec04e64b3abd67c2d800bb7c629fc35


    Headers

    Imports

    Sections

  • mvsongAX.inf
  • mvsongAX.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    dce7e063ca1e3ac1416bfb06b2df2e55


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mvsong_icon.ico
  • skin/bg_connectno.bmp
  • skin/bg_dot.bmp
  • skin/bg_menu.bmp
  • skin/bottom_bg.bmp
  • skin/bottom_left.bmp
  • skin/bottom_right.bmp
  • skin/center_bg_dot.bmp
  • skin/colon1.bmp
  • skin/left_bg.bmp
  • skin/list_title_bg.bmp
  • skin/list_title_left.bmp
  • skin/list_title_right.bmp
  • skin/mvsong_logo.bmp
  • skin/mvsong_skin.bmp
  • skin/number0.bmp
  • skin/number1.bmp
  • skin/number2.bmp
  • skin/number3.bmp
  • skin/number4.bmp
  • skin/number5.bmp
  • skin/number6.bmp
  • skin/number7.bmp
  • skin/number8.bmp
  • skin/number9.bmp
  • skin/play01_on.bmp
  • skin/play02_on.bmp
  • skin/play03_on.bmp
  • skin/play_controler.bmp
  • skin/playlist_bg.bmp
  • skin/playlist_left.bmp
  • skin/playlist_right.bmp
  • skin/right_bg.bmp
  • skin/seach_bg.bmp
  • skin/search_bg.bmp
  • skin/search_left.bmp
  • skin/search_right.bmp
  • skin/skin_bg01.bmp
  • skin/top_bg.bmp
  • skin/top_left.bmp
  • skin/top_right.bmp
  • skin/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLCount3.dll
    .dll windows:4 windows x86 arch:x86

    81cd08b6b73b740baf5bcdd2ed9e40d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    144dfc1dead6dbf5082de448c187851b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • skin/volume10.bmp
  • skin/volume100.bmp
  • skin/volume40.bmp
  • skin/volume50.bmp
  • skin/volume60.bmp
  • skin/volume70.bmp
  • skin/volume80.bmp
  • skin/volume90.bmp
  • skin/volume_bar_bg.bmp
  • skin/volume_bar_left.bmp
  • skin/volume_bar_right.bmp
  • skin/volume_controler.bmp
  • you.html
    .js