General

  • Target

    ecdc528696d9e92294cdac39eaf37bc1_JaffaCakes118

  • Size

    4.2MB

  • MD5

    ecdc528696d9e92294cdac39eaf37bc1

  • SHA1

    ac615a0fea2deee03ea293aaf39a0a437b44dc00

  • SHA256

    8f9ddb8037fa3d7b8881030dcca7f1e199ae246f42eddbc6d4f4390950030a61

  • SHA512

    719261cc3ec40e08e17ce50444361840c7d8987d1750c1a94ad30c07794b7e068ba401736ee9f6580642437df72f7cfd6f088713ec3f1d73a60348c89db937fc

  • SSDEEP

    98304:1Z3lwqFvI+7auP7FgcHf7BfetsWD3/sdrF713z49nGMYKmhJK:1t2WauTFg0g/snNzItYfhE

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

Files

  • ecdc528696d9e92294cdac39eaf37bc1_JaffaCakes118
    .rar
  • QQDdzRPG.qgi
    .cab
  • Different/DlgPrj.dll
    .dll windows:4 windows x86 arch:x86

    5a2c3898eba88d2821f4a97be2390c28


    Headers

    Imports

    Exports

    Sections

  • Different/DlgPrj.lib
  • Different/Engine/FontFiles/GBK12.bmp
  • Different/Engine/ImageLoaders/BmpLoader.dll
    .dll windows:4 windows x86 arch:x86

    9b48cebe0ba4f54ac60182bf1151a977


    Headers

    Imports

    Exports

    Sections

  • Different/Engine/ImageLoaders/GifLoader.dll
    .dll windows:4 windows x86 arch:x86

    5878d8b72eafbf76899f8fc5ae0cf830


    Headers

    Imports

    Exports

    Sections

  • Different/Engine/ImageLoaders/GsaLoader.dll
    .dll windows:4 windows x86 arch:x86

    46568ebf8a81bb5787b16e8dd1763d64


    Headers

    Imports

    Exports

    Sections

  • Different/Engine/ImageLoaders/JpgLoader.dll
    .dll windows:4 windows x86 arch:x86

    f5b128a20667e0d7ef60c33f6c136a62


    Headers

    Imports

    Exports

    Sections

  • Different/Engine/ImageLoaders/MifLoader.dll
    .dll windows:4 windows x86 arch:x86

    46568ebf8a81bb5787b16e8dd1763d64


    Headers

    Imports

    Exports

    Sections

  • Different/Engine/ImageLoaders/QmgLoader.dll
    .dll windows:4 windows x86 arch:x86

    16a28c2ce14b81bf99c3bf1e6998b016


    Headers

    Imports

    Exports

    Sections

  • Different/Engine/ImageLoaders/TgaLoader.dll
    .dll windows:4 windows x86 arch:x86

    47ddd8f394c2324367a08b74367be154


    Headers

    Imports

    Exports

    Sections

  • Different/Engine/RenderDlls/Display2D.dll
    .dll windows:4 windows x86 arch:x86

    c99d5219ec9fa1539e334129e131d4ea


    Headers

    Imports

    Exports

    Sections

  • Different/Engine/RenderDlls/DisplayD3D8.dll
    .dll windows:4 windows x86 arch:x86

    abbf71e016764d13b596225e4f232552


    Headers

    Imports

    Exports

    Sections

  • Different/EngineCfg.xml
    .xml
  • Different/EngineCfg1.xml
    .xml
  • Different/Hcq.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b526289f260800412b8a371c7557b4e9


    Headers

    Imports

    Exports

    Sections

  • Different/INSTALL.LOG
  • Different/Rank.ini
  • Different/Setting/249011146.cfg
  • Different/Setting/532289428.cfg
  • Different/Setting/596495961.cfg
  • Different/Setting/867642466.cfg
  • Different/Setting/867647593.cfg
  • Different/SoundPlayer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e819710a6439795f324f409bedb3f9c4


    Headers

    Imports

    Exports

    Sections

  • Different/Tenio.ini
  • Different/Tenio/AudioEditor.dll
    .dll windows:4 windows x86 arch:x86

    a0cd507551547512fe0578f2e2efbf35


    Headers

    Imports

    Exports

    Sections

  • Different/Tenio/TenFact.dll
    .dll windows:4 windows x86 arch:x86

    6c3bb9dc6def1213bd2b9ca8e9625a15


    Headers

    Imports

    Exports

    Sections

  • Different/Tenio/Timer.dll
    .dll .js windows:4 windows x86 arch:x86 polyglot

    879a2b700c14310dea70b9d5603dd609


    Headers

    Imports

    Exports

    Sections

  • Different/ani.ani
  • Different/config.ini
  • Different/config_back.ini
  • Different/data/Ideal/Ideal_0.mif
  • Different/data/Ideal/Ideal_1.mif
  • Different/data/Ideal/Ideal_2.mif
  • Different/data/Ideal/Ideal_3.mif
  • Different/data/Ideal/Ideal_4.mif
  • Different/data/Ideal/Ideal_5.mif
  • Different/data/addchat/c_chatbg.mif
  • Different/data/addchat/c_chatbg_l.mif
  • Different/data/addchat/chat800X600-b.mif
  • Different/data/addchat/chatarrow_down.mif
  • Different/data/addchat/chatarrow_up.mif
  • Different/data/addchat/chatbtn.mif
  • Different/data/addchat/cmbbox.mif
  • Different/data/addchat/jiantou-down.mif
  • Different/data/addchat/jiantou-up.mif
  • Different/data/addchat/tips.mif
  • Different/data/btn/big_config.mif
  • Different/data/btn/big_dating.mif
  • Different/data/btn/big_exit.mif
  • Different/data/btn/big_gameshop.mif
  • Different/data/btn/big_help.mif
  • Different/data/btn/big_vip.mif
  • Different/data/btn/button_Cancel.mif
  • Different/data/btn/button_apply.mif
  • Different/data/btn/button_buy.mif
  • Different/data/btn/button_confirm.mif
  • Different/data/btn/button_sel.mif
  • Different/data/btn/button_vip.mif
  • Different/data/btn/button_xf.mif
  • Different/data/btn/close.mif
  • Different/data/btn/hide_mark.mif
  • Different/data/btn/max.mif
  • Different/data/btn/min.mif
  • Different/data/btn/morebutton.mif
  • Different/data/btn/n_gamechip.mif
  • Different/data/btn/n_gamechip_s.mif
  • Different/data/btn/next.mif
  • Different/data/btn/normal.mif
  • Different/data/btn/o_biaoqing.mif
  • Different/data/btn/o_chaojiwanjia.mif
  • Different/data/btn/o_chaojiwanjia_s.mif
  • Different/data/btn/o_huanzhuang.mif
  • Different/data/btn/o_youxishangcheng.mif
  • Different/data/btn/o_youxishangcheng_s.mif
  • Different/data/btn/optiontext.mif
  • Different/data/btn/play_1fen.mif
  • Different/data/btn/play_2fen.mif
  • Different/data/btn/play_3fen.mif
  • Different/data/btn/play_buchu.mif
  • Different/data/btn/play_bujiao.mif
  • Different/data/btn/play_chupai.mif
  • Different/data/btn/play_start.mif
  • Different/data/btn/play_tishi.mif
  • Different/data/btn/prev.mif
  • Different/data/btn/s_paixu.mif
  • Different/data/btn/s_quxiaotuoguan.mif
  • Different/data/btn/s_shangyilun.mif
  • Different/data/btn/s_tuoguan.mif
  • Different/data/btn/score_ok.mif
  • Different/data/btn/show_mark.mif
  • Different/data/btn/t_bangzhu.mif
  • Different/data/btn/t_shezhi.mif
  • Different/data/dlgpet/bg.mif
  • Different/data/dlgpet/bgad.mif
  • Different/data/dlgpet/close.mif
  • Different/data/dlgpet/kuang.mif
  • Different/data/dlgpet/link.mif
  • Different/data/dlgpet/link2.mif
  • Different/data/dlgpet/next.mif
  • Different/data/dlgpet/prev.mif
  • Different/data/frame/bg.mif
  • Different/data/frame/bg_chatbottom.mif
  • Different/data/frame/bg_chatmid.mif
  • Different/data/frame/bg_chattop.mif
  • Different/data/frame/bg_item.mif
  • Different/data/frame/bg_logo.mif
  • Different/data/frame/bg_pet.mif
  • Different/data/frame/bg_playerinfo.mif
  • Different/data/frame/board_bottom.mif
  • Different/data/frame/board_mid.mif
  • Different/data/frame/board_top.mif
  • Different/data/frame/exp_left.mif
  • Different/data/frame/exp_mid.mif
  • Different/data/frame/exp_right.mif
  • Different/data/frame/frame_bottomleft.mif
  • Different/data/frame/frame_bottommid.mif
  • Different/data/frame/frame_bottomright.mif
  • Different/data/frame/frame_bottomright_1.mif
  • Different/data/frame/frame_btmr.mif
  • Different/data/frame/frame_midleft.mif
  • Different/data/frame/frame_midright.mif
  • Different/data/frame/frame_midright_1.mif
  • Different/data/frame/frame_topleft.mif
  • Different/data/frame/frame_topmid.mif
  • Different/data/frame/frame_topright.mif
  • Different/data/frame/frame_topright_1.mif
  • Different/data/frame/number.mif
  • Different/data/frame/show_score.mif
  • Different/data/frame/show_score1.mif
  • Different/data/infobg/playerlisttitle_bg.mif
  • Different/data/infobg/playerlisttitle_line.mif
  • Different/data/infobg/s_info_title.mif
  • Different/data/item/baby.tga
  • Different/data/item/bg_genius.mif
  • Different/data/item/cloth.tga
  • Different/data/item/dealer_qqshow.mif
  • Different/data/item/double.tga
  • Different/data/item/double_big.tga
  • Different/data/item/ffql.tga
  • Different/data/item/ffql_big.tga
  • Different/data/item/light.mif
  • Different/data/item/light.tga
  • Different/data/item/light_big.tga
  • Different/data/item/pet.tga
  • Different/data/item/shade.tga
  • Different/data/item/shade_big.tga
  • Different/data/item/switchavt.mif
  • Different/data/item/timebugle.tga
  • Different/data/item/timebugle_big.tga
  • Different/data/other/20.mif
  • Different/data/other/RollMsg.mif
  • Different/data/other/callBoard.mif
  • Different/data/other/clock.mif
  • Different/data/other/family.mif
  • Different/data/other/farmer.mif
  • Different/data/other/farmer_big.mif
  • Different/data/other/farmer_small.mif
  • Different/data/other/flag.mif
  • Different/data/other/font_1fen.mif
  • Different/data/other/font_1fen_s.mif
  • Different/data/other/font_2fen.mif
  • Different/data/other/font_2fen_s.mif
  • Different/data/other/font_3fen.mif
  • Different/data/other/font_3fen_s.mif
  • Different/data/other/font_bc_s.mif
  • Different/data/other/font_bj.mif
  • Different/data/other/font_bj_s.mif
  • Different/data/other/font_buchu.mif
  • Different/data/other/font_ready.mif
  • Different/data/other/font_ready_s.mif
  • Different/data/other/g_big_cards.mif
  • Different/data/other/itembg.mif
  • Different/data/other/itembgwhite.mif
  • Different/data/other/loading.tga
  • Different/data/other/matchmoney.mif
  • Different/data/other/offline.mif
  • Different/data/other/partner.mif
  • Different/data/other/pet_none.mif
  • Different/data/other/petframeleft.mif
  • Different/data/other/score.mif
  • Different/data/other/time_bar.mif
  • Different/data/other/time_font.mif
  • Different/data/other/time_left.mif
  • Different/data/other/time_mid.mif
  • Different/data/other/time_right.mif
  • Different/data/other/vip.mif
  • Different/data/other/wait_ready.mif
  • Different/data/other/wait_table.mif
  • Different/data/other/yy_left.mif
  • Different/data/other/yy_mid.mif
  • Different/data/other/yy_money.mif
  • Different/data/other/yy_num.mif
  • Different/data/other/yy_right.mif
  • Different/data/otherex/LineBlack.mif
  • Different/data/otherex/LineBlue.mif
  • Different/data/otherex/PicEx.mif
  • Different/data/otherex/RankLeft.mif
  • Different/data/otherex/RankRight.mif
  • Different/data/otherex/RankUp.mif
  • Different/data/otherex/RankUpClick.mif
  • Different/data/otherex/RankUpOther.mif
  • Different/data/otherex/banker.mif
  • Different/data/otherex/bg.bmp
  • Different/data/otherex/bg_clock.mif
  • Different/data/otherex/bg_head.bmp
  • Different/data/otherex/clock-font.mif
  • Different/data/otherex/emotion.mif
  • Different/data/otherex/font-lose.mif
  • Different/data/otherex/font-win.mif
  • Different/data/otherex/jiantou-left.mif
  • Different/data/otherex/jiantou-right.mif
  • Different/data/otherex/laba.mif
  • Different/data/otherex/nobanker.mif
  • Different/data/otherex/nogive.mif
  • Different/data/otherex/p_back_t.mif
  • Different/data/otherex/p_cardnum.mif
  • Different/data/otherex/p_tuoguan.mif
  • Different/data/otherex/panel.mif
  • Different/data/petbuy/bg_bottomleft.mif
  • Different/data/petbuy/bg_bottommid.mif
  • Different/data/petbuy/bg_bottomright.mif
  • Different/data/petbuy/bg_emote.mif
  • Different/data/petbuy/bg_genius.mif
  • Different/data/petbuy/bg_geniusaction.mif
  • Different/data/petbuy/bg_midleft.mif
  • Different/data/petbuy/bg_midmid.mif
  • Different/data/petbuy/bg_midright.mif
  • Different/data/petbuy/bg_topleft.mif
  • Different/data/petbuy/bg_topmid.mif
  • Different/data/petbuy/bg_topright.mif
  • Different/data/petbuy/table_inact.mif
  • Different/data/petbuy/table_select.mif
  • Different/data/popo/popo.mif
  • Different/data/popo/popo_left.mif
  • Different/data/popo/popo_magic.mif
  • Different/data/popo/popo_right.mif
  • Different/data/share/floatmenu.mif
  • Different/data/share/floattip.mif
  • Different/ddzrpg.bmp
  • Different/ddzrpg.exe
    .exe windows:4 windows x86 arch:x86

    d51e8f79be692924f209a38f2a39dfd1


    Headers

    Imports

    Sections

  • Different/ddzrpg.map
  • Different/fmodex.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Different/good.ani
  • Different/itemdetail.cfg
  • Different/newddzdown.cfg
  • Different/pic/playerlisttitle_bg.bmp
  • Different/pic/playerlisttitle_line.bmp
  • Different/qgiinstall.cfg
  • Different/repair.bat
  • Different/res/0_f.wav
  • Different/res/0_m.wav
  • Different/res/1_f.wav
  • Different/res/1_m.wav
  • Different/res/2_f.wav
  • Different/res/2_m.wav
  • Different/res/3_f.wav
  • Different/res/3_m.wav
  • Different/res/bomb.wav
  • Different/res/brshj.WAV
  • Different/res/clock.wav
  • Different/res/da.wav
  • Different/res/give.wav
  • Different/res/run.wav
  • Different/res/sj_me.wav
  • Different/res/sj_other.wav
  • Different/res/start.wav
  • Different/res/win.wav
  • Different/res/zjshj.WAV
  • Different/static.cur
  • Different/table.ini
  • Different/tablen.bmp
  • Different/tables.bmp
  • Different/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    2d3ee679b3fa7146dcc780f76415ad2e


    Headers

    Imports

    Exports

    Sections

  • QQ斗地主角色版记牌器1.01.exe
    .exe windows:4 windows x86 arch:x86

    73ec795c6c369c6ce2c3b4c3f6477daa


    Headers

    Imports

    Sections

  • ddz.ini
  • xp.skn
  • 使用说明.txt
  • 新云软件.url
    .url