Overview

overview

7

Static

static

7

f3d5011807...18.exe

windows7-x64

7

f3d5011807...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Mame32.chm

windows7-x64

1

Mame32.chm

windows10-2004-x64

1

kailleraclient.dll

windows7-x64

7

kailleraclient.dll

windows10-2004-x64

7

mame32k.exe

windows7-x64

7

mame32k.exe

windows10-2004-x64

7

mame32kk.exe

windows7-x64

1

mame32kk.exe

windows10-2004-x64

1

zip32.dll

windows7-x64

3

zip32.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    f3d5011807661f5ef4d92b8423d8c194_JaffaCakes118

  • Size

    6.6MB

  • MD5

    f3d5011807661f5ef4d92b8423d8c194

  • SHA1

    786adccd4ccfaa29d0d158b6a83da1e9952f4b82

  • SHA256

    dd277dc176acee4092c1861b441ad82eeaefb9e2b901b2a7448528a072195888

  • SHA512

    6abc34f4379d300f9a65b381477e73a7da99afbb3690525073c3cf8bc27c3e4c9bb08bcfadf77cfa9fe7824b4370ecdddce339eef36465128ff25737f0813ad8

  • SSDEEP

    196608:3qk3JXCnMPThOxwccMndNFbr8VhKCacVn2XMc3R:3z4MAxwgndNp8V8CachEfR

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • f3d5011807661f5ef4d92b8423d8c194_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • MAME32kui.ini
  • Main_dtdj.ini
  • Mame32.chm
    .chm
  • batsugun.zip
    .zip
  • ChinaEmu.nfo
  • read_me.txt
  • tp030_01.bin
  • tp030_2.bin
  • tp030_3h.bin
  • tp030_3l.bin
  • tp030_4h.bin
  • tp030_4l.bin
  • tp030_5.bin
  • tp030_6.bin
  • cfg/default.cfg
  • ini/MAME32k.ini
  • join.wav
  • kaillera.txt
  • kailleraclient.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • mame32k
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • mame32kk.exe
    .exe windows:5 windows x86 arch:x86

    4dbc5d08df28b8f55d5238d42ee67fa8


    Headers

    Imports

    Sections

  • readme.txt
  • roms/batsugun.zip
    .zip
  • ChinaEmu.nfo
  • read_me.txt
  • tp030_01.bin
  • tp030_2.bin
  • tp030_3h.bin
  • tp030_3l.bin
  • tp030_4h.bin
  • tp030_4l.bin
  • tp030_5.bin
  • tp030_6.bin
  • roms/neogeo.zip
    .zip
  • neo-geo.rom
  • ng-lo.rom
  • ng-sfix.rom
  • ng-sm1.rom
  • zip32.dll
    .dll windows:4 windows x86 arch:x86

    db1e4d25a40dfd2a9f2ff326c81166fe


    Headers

    Imports

    Exports

    Sections