General

  • Target

    d5e9afb2d0a4163e05595950ed66a3ea_JaffaCakes118

  • Size

    2.3MB

  • MD5

    d5e9afb2d0a4163e05595950ed66a3ea

  • SHA1

    2d11e31d5b1f6809b0fcdd25270eeea0ead8719c

  • SHA256

    205dd41c4e552bda5146ced0b72c9d2398017b7f16ad73f732e9f36c9a032a64

  • SHA512

    0c0688f2207cca035baebc869efac2852edfaacd74dd6e72f0dbc9867aa3594d772eeaf0d61876f4a7a6bcb83d4d6b21e71d07b9d207c3b569bb9e2fb90b6c8c

  • SSDEEP

    49152:830FDS1f3KYdYLS/d701fCsWEkI0fESuNjJjxyt68QJ3UwhJUQouE5:8qDcf3p7//8pbjI6NUwhelt5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • d5e9afb2d0a4163e05595950ed66a3ea_JaffaCakes118
    .rar
  • 155绿色软件站.url
    .url
  • DarkWave-Studio-3.5.4.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OCSetupHlp.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    0615854a8bf9998cbbbcc756d6e6d4bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Detect64.exe
    .exe windows:4 windows x86 arch:x86

    bad860eeebbaeb1aaace8bd64cfe3c4a


    Headers

    Imports

    Sections

  • $TEMP/ExperimentalScene.bmp
  • ClearOptions.exe
    .exe windows:4 windows x86 arch:x86

    62581f9d8697b0582a4b74094090667b


    Headers

    Imports

    Sections

  • DarkWave.chm
    .chm
  • Sample Projects/Arpeggiator.dwp
  • Sample Projects/Chemistry 101.dwp
  • Sample Projects/Chemistry 202.dwp
  • Sample Projects/Chemistry 303.dwp
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • x64/DarkWave-Studio.exe
    .exe windows:4 windows x64 arch:x64

    0f55302c52ee1390237ba0fb1d16c702


    Headers

    Imports

    Sections

  • x64/PlugIns/ES-CoreMachines.dll
    .dll windows:4 windows x64 arch:x64

    4c4050dcf8e80394a350841ec897dbdb


    Headers

    Imports

    Exports

    Sections

  • x86/DarkWave-Studio.exe
    .exe windows:4 windows x86 arch:x86

    f7a0e586af34107439f6375ccf9219a5


    Headers

    Imports

    Sections

  • x86/OpenAsio.dll
    .dll windows:4 windows x86 arch:x86

    bf1c8ed2e82e58ef28cf2bba1ed0cb57


    Headers

    Imports

    Exports

    Sections

  • x86/PlugIns/ES-CoreMachines.dll
    .dll windows:4 windows x86 arch:x86

    40a90085b758a031c30e8b184c458847


    Headers

    Imports

    Exports

    Sections