General

  • Target
    JaffaCakes118_3f843f1a94f5467cf9706be2d3a24deb
  • Size 17.3MB
  • Sample260104-xtf89swpe1
  • SHA256 9814b8707ea6a0ed7da40dbc1310de58de476b39c4564200b65674cc66136731
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 9 IoCs

    Codesigned binary was signed by an untrusted entity.

  • NSIS installer 2 IoCs

File Explorer

  • JaffaCakes118_3f843f1a94f5467cf9706be2d3a24deb
    .exe 17.3MB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • $PLUGINSDIR/StartMenu.dll
    .dll 7KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/UserInfo.dll
    .dll 4KB
  • $PLUGINSDIR/modern-header.bmp
    9KB
  • $PLUGINSDIR/modern-wizard.bmp
    51KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsisdk.dll
    .dll 28KB
  • $PLUGINSDIR/uninst_survey.ini
    1KB
  • 7za.exe
    .exe 574KB
  • AdsScheduler.exe
    .exe 3.9MB
  • Base.exe
    .exe 2.3MB
  • Lang/Ar/help.chm
    .chm 2.9MB
  • Lang/Ar/lang_ads.ini
    1KB
  • Lang/Ar/lang_pgp.ini
    2KB
  • Lang/Bg/help.chm
    .chm 2.9MB
  • Lang/Da/help.chm
    .chm 2.9MB
  • Lang/De/help.chm
    .chm 2.9MB
  • Lang/De/lang.ini
    46KB
  • Lang/De/lang_ads.ini
    1KB
  • Lang/De/lang_b.ini
    6KB
  • Lang/De/lang_g.ini
    3KB
  • Lang/De/lang_pgp.ini
    5KB
  • Lang/De/name
    20B
  • Lang/En/help.chm
    .chm 2.9MB
  • Lang/En/lang.ini
    43KB
  • Lang/En/lang_ads.ini
    1KB
  • Lang/En/lang_b.ini
    6KB
  • Lang/En/lang_g.ini
    1KB
  • Lang/En/lang_pgp.ini
    2KB
  • Lang/En/name
    7B
  • Lang/Es/help.chm
    .chm 2.9MB
  • Lang/Es/lang_ads.ini
    1KB
  • Lang/Fr/help.chm
    .chm 2.9MB
  • Lang/Fr/lang_ads.ini
    1KB
  • Lang/Fr/lang_pgp.ini
    2KB
  • Lang/Gr/help.chm
    .chm 2.9MB
  • Lang/It/help.chm
    .chm 2.9MB
  • Lang/It/lang_ads.ini
    1KB
  • Lang/It/lang_pgp.ini
    2KB
  • Lang/No/help.chm
    .chm 2.9MB
  • Lang/No/lang_ads.ini
    1KB
  • Lang/No/lang_pgp.ini
    2KB
  • Lang/Pl/help.chm
    .chm 2.9MB
  • Lang/Pl/lang_ads.ini
    1KB
  • Lang/Pl/lang_pgp.ini
    2KB
  • Lang/Pt/help.chm
    .chm 2.9MB
  • Lang/Pt/lang_ads.ini
    1KB
  • Lang/Pt/lang_pgp.ini
    2KB
  • Lang/Ro/help.chm
    .chm 2.9MB
  • Lang/Ro/lang.ini
    43KB
  • Lang/Ro/lang_ads.ini
    1KB
  • Lang/Ro/lang_b.ini
    3KB
  • Lang/Ro/lang_g.ini
    1KB
  • Lang/Ro/lang_pgp.ini
    2KB
  • Lang/Ro/name
    17B
  • Lang/Ru/help.chm
    .chm 1.6MB
  • Lang/Sk/help.chm
    .chm 2.9MB
  • Lang/Sk/lang_ads.ini
    1KB
  • Lang/Sk/lang_pgp.ini
    2KB
  • Lang/Sr/help.chm
    .chm 2.9MB
  • Lang/Sr/lang_ads.ini
    1KB
  • Lang/Sr/lang_pgp.ini
    2KB
  • Lang/Tr/help.chm
    .chm 2.9MB
  • Lang/Tr/lang_ads.ini
    1KB
  • Lang/Tr/lang_pgp.ini
    2KB
  • Lang/Ua/lang_ads.ini
    1KB
  • Lang/Ua/lang_pgp.ini
    2KB
  • PlGen.exe
    .exe 1.8MB
  • PlaylistGeneratorPro.exe
    .exe 3.3MB
  • ReadMe.txt
    5KB
  • ReadMe_Ru.txt
    5KB
  • ReportViewer.exe
    .exe 4.3MB
  • TrackTool.exe
    .exe 2.4MB
  • bass.dll
    .dll 105KB
  • bass_fx.dll
    .dll 29KB
  • bass_vst.dll
    .dll 14KB
  • bass_wadsp.dll
    .dll 14KB
  • bassasio.dll
    .dll 15KB
  • bassenc.dll
    .dll 16KB
  • bassmix.dll
    .dll 18KB
  • basswasapi.dll
    .dll 12KB
  • cfedit.exe
    .exe 3.1MB
  • encoder.exe
    .exe 2.0MB
  • license.txt
    2KB
  • license_RU.txt
    2KB
  • line.in
    128B
  • line2.in
    128B
  • radioboss.exe
    .exe 4.6MB
  • radioboss_guard.exe
    .exe 635KB
  • voicetrackrecorder.exe
    .exe 1.7MB

JaffaCakes118_3f843f1a94f5467cf9706be2d3a24deb

  • IMPHASH 099c0646ea7282d232219f8807883be0
  • SHA256 9814b8707ea6a0ed7da40dbc1310de58de476b39c4564200b65674cc66136731
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

  • NSIS installer

Minor OS version
0
Major OS version
4
Entry point
12860
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths