General

  • Target

    b6269273d13c4f591e311df8b9cbeb2f_JaffaCakes118

  • Size

    2.7MB

  • MD5

    b6269273d13c4f591e311df8b9cbeb2f

  • SHA1

    00530641158aba34faac6f0d378e53738be79b46

  • SHA256

    67926e45822c5211691f2c32d10dcb10daf123a746a72e3ed906b6eec3e0bead

  • SHA512

    7987b312ed2a596bcd9c4a83ea85c14597ce0f5abbb8aa5033e9fd5e84a8cc681b01e706859dbdf3bdf7af6668c749d8c832d6dbcfc802c3956d5ff4c4598011

  • SSDEEP

    49152:mcuGnSvWkmV41+BjTMPHTMCHad6VEfbAYdAXxsGsBSBrjBwqZmGSUoLy:mbvWkz1mjTMPHTbk6VGAY22GskB/BV4S

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 6 IoCs

    Detects file using ACProtect software.

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 44 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • b6269273d13c4f591e311df8b9cbeb2f_JaffaCakes118
    .rar
  • cd-ripper.exe
    .exe windows:4 windows x86 arch:x86

    effb97c99e5700d762e9f6fbd248a40f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    6fd52cfd01be9df7295bc9cb27adeda4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    0771fd22965284feacd146de985c7386


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    dff9c32d37b1f10ee460a357d46accce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    f3141363ba38e047f1a32f3ace0bb1fc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/topdomain.ini
  • MACDll.dll
    .dll windows:4 windows x86 arch:x86

    8c1b86cc4af8d7ad1dd2055360ec331a


    Headers

    Imports

    Exports

    Sections

  • MP2enc.dll
    .dll windows:4 windows x86 arch:x86

    26fadc1e71abe53e5af4d3a0d454d870


    Headers

    Imports

    Exports

    Sections

  • Plugins/IN_APE.dat
  • Plugins/in_APE.dll
    .dll windows:4 windows x86 arch:x86

    5d027dc5e9e2afc8c4c3fb6e9efc902d


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_faad.dll
    .dll windows:4 windows x86 arch:x86

    6e41f563d051d1ab9cd70b1d82bef414


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_flac.dll
    .dll windows:4 windows x86 arch:x86

    9f3d33b2414e4b74817b0546792d3c78


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_mad.dll
    .dll windows:4 windows x86 arch:x86

    dff15056ac47cddb727bb8ae8acbe2d6


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_mod.dll
    .dll windows:4 windows x86 arch:x86

    0bafed726773c03c739611b98f9a7cd7


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_mp3.dll
    .dll windows:4 windows x86 arch:x86

    3ab6522c4881e871a0d82b2927e9ab65


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_vorbis.dll
    .dll windows:4 windows x86 arch:x86

    60f549c2d8018f155037fd9360b631b6


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_vorbis.ini
  • Plugins/in_vqf.dat
  • Plugins/in_vqf.dll
    .dll windows:4 windows x86 arch:x86

    f9dfe4e1c4b856bfe5865355b4a8e978


    Headers

    Imports

    Exports

    Sections

  • Plugins/tvqdec.dll
    .dll windows:4 windows x86 arch:x86

    6dd8836d196e9a1f5a5f7a27f42c8bb7


    Headers

    Imports

    Exports

    Sections

  • SysInfo.dll
    .dll windows:4 windows x86 arch:x86

    acd605b204a3d8a06006a65185f90e8e


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    effb97c99e5700d762e9f6fbd248a40f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    0771fd22965284feacd146de985c7386


    Headers

    Imports

    Exports

    Sections

  • WMA8Connect.dll
    .dll windows:4 windows x86 arch:x86

    76ab442fcf33651b641c4b2b060619c7


    Headers

    Imports

    Exports

    Sections

  • Wmaudsdk.dll
    .dll windows:4 windows x86 arch:x86

    9ef9317e1b9a6f232aed408539d7f387


    Headers

    Imports

    Exports

    Sections

  • aspi/apix46.vx_
  • aspi/aspi2k.sy_
  • aspi/aspi32.sy_
  • aspi/aspi64.sys
  • aspi/aspichk.exe
    .exe windows:4 windows x86 arch:x86

    1beaf806beb09c22a7fb68827510a04a


    Headers

    Imports

    Sections

  • aspi/aspiinst.exe
    .exe windows:4 windows x86 arch:x86

    950b12d9a8b53f7804d5427f96a876c4


    Headers

    Imports

    Sections

  • aspi/aspixp.sys
    .sys windows:5 windows x86 arch:x86

    a0ef89ff5c735192d23ddd3f9f8b1f89


    Headers

    Imports

    Sections

  • aspi/install.bat
  • aspi/reg_xp.exe
    .exe windows:4 windows x86 arch:x86

    4940749f75f1508ae1f02e7aae3c47f5


    Headers

    Imports

    Sections

  • aspi/winaspi.dl_
  • aspi/wnaspi2k.dl_
  • aspi/wnaspi32.dl_
  • aspi/wnaspi46.dl_
  • aspi/wnaspi64.dll
    .dll windows:4 windows x86 arch:x86

    1b44b8702c08be11c862a6801d114d64


    Headers

    Imports

    Exports

    Sections

  • aspi/wnaspixp.dll
    .dll windows:4 windows x86 arch:x86

    1e0edcf6ff832f8af52f4815ce3a7443


    Headers

    Imports

    Exports

    Sections

  • aspi/wowpost.ex_
  • cdripper.chm
    .chm
  • cdripper.dll
    .dll windows:4 windows x86 arch:x86

    9adfff5b6bfcb4b188d6542d726508b9


    Headers

    Imports

    Exports

    Sections

  • cdripper.exe
    .exe windows:4 windows x86 arch:x86

    e769939435ae3dec0d3846d43c6d6ec2


    Headers

    Imports

    Sections

  • cdripper.exe.manifest
    .xml
  • gogo.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • inaspi.exe
    .exe windows:4 windows x86 arch:x86

    53e4ab2d9ea3d1b959d6f68208b116af


    Headers

    Imports

    Sections

  • lame_enc.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • libFLAC.dll
    .dll windows:4 windows x86 arch:x86

    b3adf74b6d8b48d145e7f11e1b4bb68e


    Headers

    Imports

    Exports

    Sections

  • libOggFLAC.dll
    .dll windows:4 windows x86 arch:x86

    4d21774679237b471babf07d58fa331a


    Headers

    Imports

    Exports

    Sections

  • libfaac.dll
    .dll windows:4 windows x86 arch:x86

    2b2a04989642523bc95180d8e915de89


    Headers

    Imports

    Exports

    Sections

  • libsndfile.dll
    .dll windows:4 windows x86 arch:x86

    60775a797746c7438789def2e18a0c86


    Headers

    Imports

    Exports

    Sections

  • musicbrainz.dll
    .dll windows:4 windows x86 arch:x86

    aa30582d3304739ef00dc9440aae9825


    Headers

    Imports

    Exports

    Sections

  • ogg.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • tvqenc.dll
    .dll windows:4 windows x86 arch:x86

    7e20eb3978d1c12d2743b6d06220a6ff


    Headers

    Imports

    Exports

    Sections

  • vorbis.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • vorbisenc.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • vorbisfile.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • infected.nfo
  • 安装说明.url
    .url