Overview

overview

7

Static

static

3

filerename...up.exe

windows7-x64

7

filerename...up.exe

windows10-2004-x64

7

$PLUGINSDI...on.dll

windows7-x64

3

$PLUGINSDI...on.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$R0.dll

windows7-x64

3

$R0.dll

windows10-2004-x64

3

Buy File R...o!.url

windows7-x64

1

Buy File R...o!.url

windows10-2004-x64

1

DevExpress....1.dll

windows7-x64

1

DevExpress....1.dll

windows10-2004-x64

1

DevExpress....1.dll

windows7-x64

1

DevExpress....1.dll

windows10-2004-x64

1

DevExpress....1.dll

windows7-x64

1

DevExpress....1.dll

windows10-2004-x64

1

DevExpress....1.dll

windows7-x64

1

DevExpress....1.dll

windows10-2004-x64

1

ExplorerControls.dll

windows7-x64

1

ExplorerControls.dll

windows10-2004-x64

1

File Renam...bo.exe

windows7-x64

5

File Renam...bo.exe

windows10-2004-x64

3

Helpfile.chm

windows7-x64

1

Helpfile.chm

windows10-2004-x64

1

taglib-sharp.dll

windows7-x64

1

taglib-sharp.dll

windows10-2004-x64

1

uninstall.exe

windows7-x64

7

uninstall.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df9328fa2e7f4297c656a7536e9e2bdc_JaffaCakes118

  • Size

    5.3MB

  • MD5

    df9328fa2e7f4297c656a7536e9e2bdc

  • SHA1

    1e5e45bda9431ccdfbac65b1cf549d7e906cc91a

  • SHA256

    c6150be6edb86a171ac5df1d5af44919dbb6ef87ce0a34980a8994286964470b

  • SHA512

    92b366c145113936f7d4f399e868b552643641fc3dd4e4f74e5efa7cab399c882e38311dcb0c70565832bb998a5eaecfafab0c446a4898868ea2a3dd98936447

  • SSDEEP

    98304:d3RwU16ihfAjw+9vSZaxULLlLCHkVERLfeoivYu+BCPGmVg0Krig1axkeW2X:d3R139gwYvS3CHkVER2kCOm/lg1ntk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • df9328fa2e7f4297c656a7536e9e2bdc_JaffaCakes118
    .rar
  • filerenamerturbo-setup.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • $APPDATA/Kristanix Software/File Renamer Turbo/1.0.0.0/Profiles/Add counting number.frp
  • $APPDATA/Kristanix Software/File Renamer Turbo/1.0.0.0/Profiles/Add today's date to file names.frp
  • $APPDATA/Kristanix Software/File Renamer Turbo/1.0.0.0/Profiles/Add width x height to video file names.frp
  • $APPDATA/Kristanix Software/File Renamer Turbo/1.0.0.0/Profiles/Clean-up file names.frp
  • $APPDATA/Kristanix Software/File Renamer Turbo/1.0.0.0/Profiles/Move images into width x height folders.frp
  • $APPDATA/Kristanix Software/File Renamer Turbo/1.0.0.0/Profiles/Put space infront and behind -'s.frp
  • $APPDATA/Kristanix Software/File Renamer Turbo/1.0.0.0/Profiles/Search Music Album Online.frp
  • $APPDATA/Kristanix Software/File Renamer Turbo/1.0.0.0/Profiles/Set file name using ID3 values.frp
  • $PLUGINSDIR/GetVersion.dll
    .dll windows:4 windows x86 arch:x86

    0125039a427c6f95b3acc9227413ece5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $R0
    .dll regsvr32 windows:4 windows x86 arch:x86

    69c5d10ded418b479a80ae5f1627d37b


    Headers

    Imports

    Exports

    Sections

  • Buy File Renamer Turbo!.URL
  • DevExpress.Data.v8.1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DevExpress.Utils.v8.1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DevExpress.XtraBars.v8.1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DevExpress.XtraEditors.v8.1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ExplorerControls.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • File Renamer Turbo.exe
    .exe windows:4 windows x86 arch:x86

    07f0f3f337d6525c6652482001960b7a


    Headers

    Imports

    Sections

  • Helpfile.chm
    .chm
  • License.txt
  • casinglist-example.txt
  • taglib-sharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • 新云软件.url
    .url