General

  • Target

    bd0ecf36f7d24bbbb772fea073093fa7_JaffaCakes118

  • Size

    15.7MB

  • MD5

    bd0ecf36f7d24bbbb772fea073093fa7

  • SHA1

    6cf9922e01bea949a542369b912da6547a87f1f8

  • SHA256

    78ca941981136f8de181216770bc32154be849c0d172314744f96c0ce8df9ed1

  • SHA512

    5ef2cded0f6b032d2a2807e1567b20d0683b8d01f5acecac8c94fc95165b3b850d234d9d7d5235f5d92fda655fb028e24102adadd2d6aa674f871ec9b2f1ac04

  • SSDEEP

    393216:DgSoLYCSMS2VO14A74NOivZ6+fgbEUinQDkgSd:kSoLozMO1jqAjiISd

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • bd0ecf36f7d24bbbb772fea073093fa7_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin.dll
    .dll windows:4 windows x86 arch:x86

    113bfc7886d2a6fb29af8c5aceec28e5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin_JApply.dll
    .dll windows:4 windows x86 arch:x86

    f7f99bdd3b6ce4a87df0ce0eebcde6c0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • TCLSCOPY/TCLSCheck.lst
  • TCLSCOPY/TenProtect/SecureCheck.dll
    .dll windows:5 windows x86 arch:x86

    2d65f7bb6cb1a161ea3b58bd44b53c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TCLSCOPY/TenProtect/TP/TPHelper.Installer.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    a49b0342971aa199fc6349725b90146d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsUnzip.dll
    .dll windows:4 windows x86 arch:x86

    f61b492d16b51856da71c9a124fee190


    Headers

    Imports

    Exports

    Sections

  • BugTrace.ini
  • Res.vfs
  • TPHelper.exe
    .exe windows:5 windows x86 arch:x86

    1ddb4199de7fe2b240b36deb9b7f65c0


    Code Sign

    Headers

    Imports

    Sections

  • TPHelperBase.dll
    .dll windows:5 windows x86 arch:x86

    87bed5a7cba00c7e1f4015f1bdae2183


    Code Sign

    Headers

    Imports

    Sections

  • TPWeb.exe
    .exe windows:5 windows x86 arch:x86

    0a8195987a141de7f818320ba072fc11


    Code Sign

    Headers

    Imports

    Sections

  • Tenio.ini
  • config.dat
  • config/cursor.xml
  • config/name2id.xml
  • config/uiconfig.xml
  • TCLSCOPY/TenProtect/TP/TPHelper.a.dat
    .zip
  • BugTrace.dll
    .dll windows:5 windows x86 arch:x86

    b1e558cf7f9d998ad1ccc516edf07da7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Tenio/June.dll
    .dll windows:4 windows x86 arch:x86

    0cdb79df4d5662f8f47350cdbc82b3db


    Headers

    Imports

    Exports

    Sections

  • Tenio/TenFact.dll
    .dll windows:4 windows x86 arch:x86

    fa0277239d83fd4b08a6b403f8e80a9d


    Headers

    Imports

    Exports

    Sections

  • Tenio/TenTPF.dll
    .dll windows:4 windows x86 arch:x86

    bc6b947e41095431abaff24a2340a0da


    Headers

    Imports

    Exports

    Sections

  • Tenio/VFS.dll
    .dll windows:5 windows x86 arch:x86

    c3ce31edc42e6cfed8c80472fd2d52a3


    Headers

    Imports

    Exports

    Sections

  • TCLSCOPY/mmog_data.xml
    .xml
  • TCLSCOPY/plugins/TPDownLoad.dll
    .dll windows:5 windows x86 arch:x86

    0a02cabb3d72371e349800b0fa7dc129


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TCLSCOPY/version.ini
  • auto.lst
  • tcls.lst
  • 地下城与勇士卸载.exe.nsis