General

  • Target

    f715e8fcf3fd30d4471be9f4f19c873d_JaffaCakes118

  • Size

    5.4MB

  • MD5

    f715e8fcf3fd30d4471be9f4f19c873d

  • SHA1

    46aef4a303f9d824f4b0c1a8f160981968e65fd7

  • SHA256

    d76be448fa5e302cf60aa3136d576e553e8f8a29de4c6e4417013153fd2f9b81

  • SHA512

    2b082d811db2156c76ed64c9eaad95b28344aceb431cd91d01bb268dab8ca054e4f695c1b4148ec4f88dff29660e057d6260ac1469354697e63e22387b54934f

  • SSDEEP

    98304:Ihn4okm2Uv+P1sEBoFxQsA1bPR7xr3DlKwdxngwNy0K6/YzGes5hgdN:Ix4FluQ1RT7rHgwNXK6IdN

Score
3/10

Malware Config

Signatures

  • Unsigned PE 31 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • f715e8fcf3fd30d4471be9f4f19c873d_JaffaCakes118
    .rar
  • Setup-hall-main.exe
    .exe windows:4 windows x86 arch:x86

    5f65217e6605a4cda5d136ec8a66748c


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/rfshdktp.dll
    .dll windows:4 windows x86 arch:x86

    042f3c184e7c0923b6325ab1dc09aed7


    Headers

    Imports

    Exports

    Sections

  • AVManage.dll
    .dll windows:4 windows x86 arch:x86

    91166ad13f46a6d4215f00e5ac80e029


    Headers

    Imports

    Exports

    Sections

  • Avatar.dll
    .dll windows:4 windows x86 arch:x86

    47976afcb3a1001708120cd617845153


    Headers

    Imports

    Exports

    Sections

  • BBMsg.dll
    .dll windows:4 windows x86 arch:x86

    b52fc45c4419ffecf7a426bbb983c753


    Headers

    Imports

    Exports

    Sections

  • CardRes.dll
    .dll windows:4 windows x86 arch:x86

    47427df2e6830aa66d3fcdcbc5921e73


    Headers

    Imports

    Exports

    Sections

  • ClientCore25.dll
    .dll windows:4 windows x86 arch:x86

    3b03d906de519fba7a7ada3f0caa6ff6


    Headers

    Imports

    Exports

    Sections

  • DllTunnel.dll
    .dll windows:4 windows x86 arch:x86

    b79063e19977f3d47ab5bbc857c2e7b5


    Headers

    Imports

    Exports

    Sections

  • JuDown.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    95c2677f862a8968316f0871c244e6ea


    Headers

    Imports

    Exports

    Sections

  • MFC71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • RakNet.dll
    .dll windows:4 windows x86 arch:x86

    aded0736c9b77017e301c9d033b32968


    Headers

    Imports

    Exports

    Sections

  • ResList.ini
  • UpdateHall.exe
    .exe windows:4 windows x86 arch:x86

    fdb9cf106ec7a0403355c68f805f29d8


    Headers

    Imports

    Sections

  • WordLib.dll
    .dll windows:4 windows x86 arch:x86

    035228e14c8cde179803e6a8ed13e98a


    Headers

    Imports

    Exports

    Sections

  • Zephyr.dll
    .dll windows:4 windows x86 arch:x86

    c58ec3c13028a2178b864fc6196e75dc


    Headers

    Imports

    Exports

    Sections

  • ZephyrMFC.dll
    .dll windows:4 windows x86 arch:x86

    61453a0733a91c16c340c0d83a0bf817


    Headers

    Imports

    Exports

    Sections

  • ZephyrNet21.dll
    .dll windows:4 windows x86 arch:x86

    8f394b784ea21059b76a465799eb9cf9


    Headers

    Imports

    Exports

    Sections

  • avatar/0.png
    .jpg
  • avatar/1.png
    .png
  • card/Card_1024.zpc
  • card/Card_800.zpc
  • chat/Action.txt
  • chat/Chat.dat
    .html
  • chat/Face.txt
  • chat/images/00.gif
    .gif
  • chat/images/01.gif
    .gif
  • chat/images/02.gif
    .gif
  • chat/images/03.gif
    .gif
  • chat/images/04.gif
    .gif
  • chat/images/05.gif
    .gif
  • chat/images/06.gif
    .gif
  • chat/images/07.gif
    .gif
  • chat/images/08.gif
    .gif
  • chat/images/09.gif
    .gif
  • chat/images/10.gif
    .gif
  • chat/images/11.gif
    .gif
  • chat/images/12.gif
    .gif
  • chat/images/13.gif
    .gif
  • chat/images/14.gif
    .gif
  • chat/images/15.gif
    .gif
  • chat/images/16.gif
    .gif
  • chat/images/17.gif
    .gif
  • chat/images/18.gif
    .gif
  • chat/images/19.gif
    .gif
  • chat/images/20.gif
    .gif
  • chat/images/21.gif
    .gif
  • chat/images/22.gif
    .gif
  • chat/images/23.gif
    .gif
  • chat/images/24.gif
    .gif
  • chat/images/25.gif
    .gif
  • chat/images/26.gif
    .gif
  • chat/images/27.gif
    .gif
  • chat/images/28.gif
    .gif
  • chat/images/29.gif
    .gif
  • chat/images/30.gif
    .gif
  • chat/images/31.gif
    .gif
  • chat/images/32.gif
    .gif
  • chat/images/33.gif
    .gif
  • chat/images/34.gif
    .gif
  • chat/images/35.gif
    .gif
  • chat/images/36.gif
    .gif
  • chat/images/37.gif
    .gif
  • chat/images/38.gif
    .gif
  • chat/images/39.gif
    .gif
  • chat/images/40.gif
    .gif
  • chat/images/41.gif
    .gif
  • chat/images/42.gif
    .gif
  • chat/images/43.gif
    .gif
  • chat/images/44.gif
    .gif
  • chat/images/45.gif
    .gif
  • chat/images/46.gif
    .gif
  • chat/images/47.gif
    .gif
  • chat/images/48.gif
    .gif
  • chat/images/49.gif
    .gif
  • chat/images/50.gif
    .gif
  • chat/images/51.gif
    .gif
  • chat/images/52.gif
    .gif
  • chat/images/53.gif
    .gif
  • chat/images/54.gif
    .gif
  • chat/images/55.gif
    .gif
  • chat/images/56.gif
    .gif
  • chat/images/57.gif
    .gif
  • chat/images/58.gif
    .gif
  • chat/images/59.gif
    .gif
  • chat/images/60.gif
    .gif
  • chat/images/61.gif
    .gif
  • chat/images/62.gif
    .gif
  • chat/images/63.gif
    .gif
  • chat/images/64.gif
    .gif
  • chat/images/65.gif
    .gif
  • chat/images/66.gif
    .gif
  • chat/images/67.gif
    .gif
  • chat/images/68.gif
    .gif
  • chat/images/69.gif
    .gif
  • chat/images/70.gif
    .gif
  • chat/images/71.gif
    .gif
  • chat/images/72.gif
    .gif
  • chat/images/73.gif
    .gif
  • chat/images/74.gif
    .gif
  • chat/images/75.gif
    .gif
  • chat/images/76.gif
    .gif
  • chat/images/77.gif
    .gif
  • chat/images/78.gif
    .gif
  • chat/images/79.gif
    .gif
  • chat/images/80.gif
    .gif
  • chat/images/81.gif
    .gif
  • chat/images/82.gif
    .gif
  • chat/images/83.gif
    .gif
  • chat/images/84.gif
    .gif
  • chat/images/85.gif
    .gif
  • chat/images/86.gif
    .gif
  • chat/images/87.gif
    .gif
  • chat/images/88.gif
    .gif
  • chat/images/89.gif
    .gif
  • chat/images/90.gif
    .gif
  • chat/images/91.gif
    .gif
  • chat/images/92.gif
    .gif
  • chat/images/93.gif
    .gif
  • chat/images/94.gif
    .gif
  • chat/images/95.gif
    .gif
  • chat/images/96.gif
    .gif
  • chat/images/97.gif
    .gif
  • chat/images/98.gif
    .gif
  • chat/images/99.gif
    .gif
  • chat/images/bugle.gif
    .gif
  • chat/images/face.bmp
  • chat/images/gm.bmp
  • chat/mask.zpc
  • chat/msg.htm
    .html .js polyglot
  • client.ini
  • common/adver.bmp
  • common/btn_close.bmp
  • common/btn_min.bmp
  • common/btn_switchleft.bmp
  • common/btn_switchright.bmp
  • common/btntab0.bmp
  • common/btntab1.bmp
  • common/button.bmp
  • common/check.bmp
  • common/default.ini
  • common/dlgframe.bmp
  • common/droparrow.bmp
  • common/experience.txt
  • common/info.bmp
  • common/listarrow.bmp
  • common/listhead.bmp
  • common/logo.bmp
  • common/logo1.bmp
  • common/msgframe.bmp
  • common/progress.bmp
  • common/radio.bmp
  • common/recommend.ini
  • common/separate.bmp
  • common/tablelevel_m.txt
  • common/tablelevel_s.txt
  • common/title.bmp
  • common/title1.bmp
  • download/GameUpdate.exe
    .exe windows:4 windows x86 arch:x86

    ea7b3b60ef2456e2255644b348c33af9


    Headers

    Imports

    Sections

  • hall.exe
    .exe windows:4 windows x86 arch:x86

    4114eb64706621313b8681191de21300


    Headers

    Imports

    Exports

    Sections

  • hall.ico
  • hall/gameframe/btn_callgm.bmp
  • hall/gameframe/btn_close.bmp
  • hall/gameframe/btn_config.bmp
  • hall/gameframe/btn_exchangejetton.bmp
  • hall/gameframe/btn_exit.bmp
  • hall/gameframe/btn_gamerule.bmp
  • hall/gameframe/btn_hall.bmp
  • hall/gameframe/btn_max.bmp
  • hall/gameframe/btn_min.bmp
  • hall/gameframe/btn_restore.bmp
  • hall/gameframe/btn_roseexchange.bmp
  • hall/gameframe/btn_send.bmp
  • hall/gameframe/btn_strongbox.bmp
  • hall/gameframe/btn_wallet.bmp
  • hall/gameframe/frame.bmp
  • hall/gameframe/gameframe.ini
  • hall/gameframe/mainwnd.bmp
  • hall/gameframe/statusbar.bmp
  • hall/gameframe/userinfo.bmp
  • hall/ghover.cur
  • hall/room/action.bmp
  • hall/room/box.bmp
  • hall/room/btn_add.bmp
  • hall/room/btn_callgm.bmp
  • hall/room/btn_config.bmp
  • hall/room/btn_exchangejetton.bmp
  • hall/room/btn_exit.bmp
  • hall/room/btn_findtable.bmp
  • hall/room/btn_game.bmp
  • hall/room/btn_left.bmp
  • hall/room/btn_leftqueue.bmp
  • hall/room/btn_modifypsw_select.bmp
  • hall/room/btn_modifypsw_unselect.bmp
  • hall/room/btn_propshop.bmp
  • hall/room/btn_queue.bmp
  • hall/room/btn_rechargecard.bmp
  • hall/room/btn_rechargefast.bmp
  • hall/room/btn_rechargenewscorecard.bmp
  • hall/room/btn_rechargeweb.bmp
  • hall/room/btn_right.bmp
  • hall/room/btn_searchuser.bmp
  • hall/room/btn_sendpchat.bmp
  • hall/room/btn_strongbox.bmp
  • hall/room/btn_strongbox_in_select.bmp
  • hall/room/btn_strongbox_in_unselect.bmp
  • hall/room/btn_strongbox_out_select.bmp
  • hall/room/btn_strongbox_out_unselect.bmp
  • hall/room/btn_sub.bmp
  • hall/room/btn_wallet.bmp
  • hall/room/btn_wallet_in_select.bmp
  • hall/room/btn_wallet_in_unselect.bmp
  • hall/room/btn_wallet_modifypsw_select.bmp
  • hall/room/btn_wallet_modifypsw_unselect.bmp
  • hall/room/btn_wallet_out_select.bmp
  • hall/room/btn_wallet_out_unselect.bmp
  • hall/room/bugle.bmp
  • hall/room/chatopback.bmp
  • hall/room/face.bmp
  • hall/room/hand.bmp
  • hall/room/listback.bmp
  • hall/room/listicon.bmp
  • hall/room/pchat.ini
  • hall/room/pchatbuttom.bmp
  • hall/room/pchatitle1.bmp
  • hall/room/pchatitle2.bmp
  • hall/room/printscr.bmp
  • hall/room/prop/amulet.bmp
  • hall/room/prop/btn_amulet.bmp
  • hall/room/prop/btn_dscore.bmp
  • hall/room/prop/btn_redbag.bmp
  • hall/room/prop/btn_rose.bmp
  • hall/room/prop/btn_speaker.bmp
  • hall/room/prop/dscore.bmp
  • hall/room/prop/redbag.bmp
  • hall/room/prop/rose.bmp
  • hall/room/prop/speaker.bmp
  • hall/room/propback.bmp
  • hall/room/quene.bmp
  • hall/room/queueback.bmp
  • hall/room/searchuser_1.bmp
  • hall/room/searchuser_2.bmp
  • hall/room/strongbox_back_in.bmp
  • hall/room/strongbox_back_normal.bmp
  • hall/room/strongbox_back_out.bmp
  • hall/room/tablelevel.bmp
  • hall/room/usertips.bmp
  • hall/room/viewframe.bmp
  • hall/room/wallet_back_in.bmp
  • hall/room/wallet_back_normal.bmp
  • hall/room/wallet_back_out.bmp
  • hall/urllist.ini
  • ijl15.dll
    .dll windows:4 windows x86 arch:x86

    6b540d7d784d97e028bc85e2ab457662


    Headers

    Imports

    Exports

    Sections

  • login/btn_kd1.bmp
  • login/btn_kd2.bmp
  • login/btn_normal1.bmp
  • login/btn_normal2.bmp
  • login/btn_register.bmp
  • login/btn_setproxy.bmp
  • login/dlgframe.bmp
  • login/keyboard.bmp
  • login/keyboard1.bmp
  • login/login.ini
  • login/logo.bmp
  • login/tab1.bmp
  • login/tab2.bmp
  • mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bcd2542f46e742c06cabefff84c7320d


    Headers

    Imports

    Exports

    Sections

  • mfc71u.dll
    .dll windows:4 windows x86 arch:x86

    b3fbf4599c17e9bc7ccae6518bf0f868


    Headers

    Imports

    Sections

  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • msvcrt.dll
    .dll windows:5 windows x86 arch:x86

    1838f96daab97a33395f5dee7b6f4a3c


    Headers

    Imports

    Exports

    Sections

  • olepro32.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    bfbea1910cdffc9fc4cb569cbd816073


    Headers

    Imports

    Exports

    Sections

  • python25.dll
    .dll windows:4 windows x86 arch:x86

    c95ffe1c5c0fb3e98b1b03977ef3bab5


    Headers

    Imports

    Exports

    Sections

  • stlport_vc7146.dll
    .dll windows:4 windows x86 arch:x86

    34cc24c17a4f32fe442841daa36b7643


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    5f65217e6605a4cda5d136ec8a66748c


    Headers

    Imports

    Sections

  • winmain/WndMain.ini
  • winmain/btn_Max.bmp
  • winmain/btn_Min.bmp
  • winmain/btn_accountbind.bmp
  • winmain/btn_avatar.bmp
  • winmain/btn_bbs.bmp
  • winmain/btn_brush.bmp
  • winmain/btn_changeskin.bmp
  • winmain/btn_close.bmp
  • winmain/btn_exchangejetton.bmp
  • winmain/btn_exit.bmp
  • winmain/btn_expchangemoney.bmp
  • winmain/btn_extend.bmp
  • winmain/btn_fillmoney.bmp
  • winmain/btn_gamelist1.bmp
  • winmain/btn_gamelist2.bmp
  • winmain/btn_history.bmp
  • winmain/btn_login.bmp
  • winmain/btn_matchlist1.bmp
  • winmain/btn_matchlist2.bmp
  • winmain/btn_presentjetton.bmp
  • winmain/btn_prop.bmp
  • winmain/btn_releasebind.bmp
  • winmain/btn_restore.bmp
  • winmain/btn_safebox.bmp
  • winmain/btn_selectmodule.bmp
  • winmain/btn_servicelist1.bmp
  • winmain/btn_servicelist2.bmp
  • winmain/btn_strongbox.bmp
  • winmain/btn_unselectmodule.bmp
  • winmain/btn_webmain.bmp
  • winmain/frame.bmp
  • winmain/levelchar.bmp
  • winmain/levelprocess.bmp
  • winmain/mainwnd.bmp
  • winmain/sitelogo.bmp
  • winmain/statusbar.bmp
  • winmain/treeback.bmp
  • winmain/treetitle_game.bmp
  • winmain/treetitle_match.bmp
  • winmain/treetitle_service.bmp
  • winmain/userinfo.bmp
  • winmain/webframe.bmp
  • xvidcore.dll
    .dll windows:4 windows x86 arch:x86

    8c6cf3c7f9082f43029ae889242b0467


    Headers

    Imports

    Exports

    Sections

  • 新云软件.url
    .url