Overview

overview

7

Static

static

3

af8dbee11f...18.exe

windows7-x64

3

af8dbee11f...18.exe

windows10-2004-x64

3

$PLUGINSDI...t3.dll

windows7-x64

3

$PLUGINSDI...t3.dll

windows10-2004-x64

3

$PLUGINSDI...v3.dll

windows7-x64

3

$PLUGINSDI...v3.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ad.dll

windows7-x64

3

$PLUGINSDI...ad.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

MV_Song.exe

windows7-x64

3

MV_Song.exe

windows10-2004-x64

3

mvs_update.exe

windows7-x64

3

mvs_update.exe

windows10-2004-x64

3

mvsongAX.dll

windows7-x64

3

mvsongAX.dll

windows10-2004-x64

3

skin/uninstall.exe

windows7-x64

7

skin/uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...t3.dll

windows7-x64

3

$PLUGINSDI...t3.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

you.html

windows7-x64

3

you.html

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    af8dbee11f28a7f99e1290cef3b03139_JaffaCakes118

  • Size

    775KB

  • MD5

    af8dbee11f28a7f99e1290cef3b03139

  • SHA1

    079ee0010e5d6e5cc238b11eea36fea70550fa6a

  • SHA256

    7c03a3ade7c8cf579a840021a047c1582593f407c908b6beca3038cae97a51ed

  • SHA512

    c4510f72b6cedbe06d2260299bd094883bcb28f8a4330b7a3c611e474d3bc3101d0e9ec1cd3737cf3b060c1124e433c88b9cdc80d34bcef97156301fceba5375

  • SSDEEP

    12288:4RvALAmOopiVkrtM9a5z4AJiDT7+0BZapbKuD6firm/8WmflPvzKgt:rDWCrtWi4WE7+cUpbF666fwzt

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • af8dbee11f28a7f99e1290cef3b03139_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLCount3.dll
    .dll windows:4 windows x86 arch:x86

    81cd08b6b73b740baf5bcdd2ed9e40d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLoading_v3.dll
    .dll windows:4 windows x86 arch:x86

    c894a79beff87e79e7c96d60777b5a38


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    9f4ddca8eafe383af62c3c9a0d4df294


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InetLoad.dll
    .dll windows:4 windows x86 arch:x86

    64f6fb491a03ba4c4bdd89216c945c03


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • MV_Song.exe
    .exe windows:4 windows x86 arch:x86

    83fff7b438f1744d3c4e69f0458f5d48


    Code Sign

    Headers

    Imports

    Sections

  • mvs_update.exe
    .exe windows:4 windows x86 arch:x86

    b715969fd778d2b4aaf28b72e52c1762


    Code Sign

    Headers

    Imports

    Sections

  • mvsongAX.inf
  • mvsongAX.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    00c970f61f335378c71aab7265fbeea9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mvsong_icon.ico
  • skin/bg_bottom_center.bmp
  • skin/bg_bottom_left.bmp
  • skin/bg_bottom_right.bmp
  • skin/bg_connectno.bmp
  • skin/bg_dot.bmp
  • skin/bg_left.bmp
  • skin/bg_menu.bmp
  • skin/bg_right.bmp
  • skin/bg_top_center.bmp
  • skin/bg_top_left.bmp
  • skin/bg_top_right.bmp
  • skin/bottom_bg.bmp
  • skin/bottom_left.bmp
  • skin/bottom_right.bmp
  • skin/center_bg_dot.bmp
  • skin/colon1.bmp
  • skin/left_bg.bmp
  • skin/list_title_bg.bmp
  • skin/list_title_left.bmp
  • skin/list_title_right.bmp
  • skin/mvsong_logo.bmp
  • skin/mvsong_skin.bmp
  • skin/number0.bmp
  • skin/number1.bmp
  • skin/number2.bmp
  • skin/number3.bmp
  • skin/number4.bmp
  • skin/number5.bmp
  • skin/number6.bmp
  • skin/number7.bmp
  • skin/number8.bmp
  • skin/number9.bmp
  • skin/play01_on.bmp
  • skin/play02_on.bmp
  • skin/play03_on.bmp
  • skin/play_controler.bmp
  • skin/playlist_bg.bmp
  • skin/playlist_left.bmp
  • skin/playlist_right.bmp
  • skin/right_bg.bmp
  • skin/seach_bg.bmp
  • skin/search_bg.bmp
  • skin/search_left.bmp
  • skin/search_right.bmp
  • skin/skin_bg01.bmp
  • skin/top_bg.bmp
  • skin/top_left.bmp
  • skin/top_right.bmp
  • skin/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLCount3.dll
    .dll windows:4 windows x86 arch:x86

    81cd08b6b73b740baf5bcdd2ed9e40d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    9f4ddca8eafe383af62c3c9a0d4df294


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • skin/volume10.bmp
  • skin/volume100.bmp
  • skin/volume40.bmp
  • skin/volume50.bmp
  • skin/volume60.bmp
  • skin/volume70.bmp
  • skin/volume80.bmp
  • skin/volume90.bmp
  • skin/volume_bar_bg.bmp
  • skin/volume_bar_left.bmp
  • skin/volume_bar_right.bmp
  • skin/volume_controler.bmp
  • today50.ini
  • you.html
    .js