General

  • Target

    38b7183330f7d0ddde8e288e15abb0ce_JaffaCakes118

  • Size

    33.8MB

  • MD5

    38b7183330f7d0ddde8e288e15abb0ce

  • SHA1

    84d9e8033caf54006470099c56fd984592684380

  • SHA256

    763060247e08ba76835b2b4940236415b53f1f3d35784e0bd72b10f0213c67e0

  • SHA512

    ccf9c2ada67d8c4d2b801ecc62951f33c86ae0d2b8c149c8454def081a5d96ff4ccf3c57ee5284729b82c06ea7579828da67f510bc3bb21f131f8b577713af03

  • SSDEEP

    786432:sDebuWNHEDddtJZH86BAj+8Kszz0jOvASGJJ0IBPmqptFeV:syCZc62CHO6+ASSxmGM

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 38b7183330f7d0ddde8e288e15abb0ce_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $APPDATA/TurbogamesClient/Games/8819/game_8819.tbd
  • $APPDATA/stylishgirls.ico
  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • RescueTeam2.exe
    .exe windows:5 windows x86 arch:x86

    639172c969cf2816579eeec6096bb435


    Headers

    Imports

    Sections

  • bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • data/comics/finish0.CMX
  • data/comics/finish0.lua
  • data/comics/intro0.CMX
  • data/comics/intro0.lua
  • data/conf/autoexec.lua
  • data/conf/loading.lua
  • data/conf/locale_en.lua
  • data/conf/locale_ru.lua
  • data/conf/splash.lua
  • data/font/en/a_fontsystem14.lua
  • data/font/en/a_fontsystem14.png
    .png
  • data/font/en/tmpArialBold14.lua
  • data/font/en/tmpArialBold14.png
    .png
  • data/font/en/tmpCalibriBold20.lua
  • data/font/en/tmpCalibriBold20.png
    .png
  • data/font/en/tmpCalibriBold25.lua
  • data/font/en/tmpCalibriBold25.png
    .png
  • data/font/en/tmpCalibriBold30.lua
  • data/font/en/tmpCalibriBold30.png
    .png
  • data/font/en/tmpCalibriBold36.lua
  • data/font/en/tmpCalibriBold36.png
    .png
  • data/font/en/tmpCalibriRegular18.lua
  • data/font/en/tmpCalibriRegular18.png
    .png
  • data/gui/achieve.lua
  • data/gui/comics.lua
  • data/gui/editor.lua
  • data/gui/escape.lua
  • data/gui/finish.lua
  • data/gui/freeze.lua
  • data/gui/game_loading.lua
  • data/gui/hint.lua
  • data/gui/level.lua
  • data/gui/level_name.lua
  • data/gui/locale.lua
  • data/gui/main.lua
  • data/gui/map.lua
  • data/gui/messagebox.lua
  • data/gui/options_osx.lua
  • data/gui/options_win.lua
  • data/gui/profile_add.lua
  • data/gui/profile_new.lua
  • data/gui/profile_select.lua
  • data/gui/splash.lua
  • data/gui/start.lua
  • data/gui/train.lua
  • data/level/achieve.lvx
  • data/level/level000.lvl
  • data/level/level001.lvl
  • data/level/level002.lvl
  • data/level/level003.lvl
  • data/level/level004.lvl
  • data/level/level005.lvl
  • data/level/level006.lvl
  • data/level/level007.lvl
  • data/level/level008.lvl
  • data/level/level009.lvl
  • data/level/level010.lvl
  • data/level/level011.lvl
  • data/level/level012.lvl
  • data/level/level013.lvl
  • data/level/level014.lvl
  • data/level/level015.lvl
  • data/level/level016.lvl
  • data/level/level017.lvl
  • data/level/level018.lvl
  • data/level/level019.lvl
  • data/level/level020.lvl
  • data/level/level021.lvl
  • data/level/level022.lvl
  • data/level/level023.lvl
  • data/level/level024.lvl
  • data/level/level025.lvl
  • data/level/level026.lvl
  • data/level/level027.lvl
  • data/level/level028.lvl
  • data/level/level029.lvl
  • data/level/level030.lvl
  • data/level/level031.lvl
  • data/level/level032.lvl
  • data/level/level033.lvl
  • data/level/level034.lvl
  • data/level/level035.lvl
  • data/level/level036.lvl
  • data/level/level037.lvl
  • data/level/level038.lvl
  • data/level/level039.lvl
  • data/level/level040.lvl
  • data/level/level041.lvl
  • data/level/level042.lvl
  • data/level/level043.lvl
  • data/level/level044.lvl
  • data/level/level045.lvl
  • data/level/level046.lvl
  • data/level/level047.lvl
  • data/level/level048.lvl
  • data/level/level049.lvl
  • data/level/map.lvx
  • data/sound/achieve.ogg
  • data/sound/alarm.ogg
  • data/sound/alert.ogg
  • data/sound/bonus_start.ogg
  • data/sound/bonus_stop.ogg
  • data/sound/counter.ogg
  • data/sound/doctor_start.ogg
  • data/sound/explosion00.ogg
  • data/sound/explosion01.ogg
  • data/sound/explosion02.ogg
  • data/sound/ext/bar_road.ogg
  • data/sound/ext/bar_stone.ogg
  • data/sound/ext/bar_tree.ogg
  • data/sound/ext/build.ogg
  • data/sound/ext/click.ogg
  • data/sound/ext/mouse_in.ogg
  • data/sound/ext/typing.ogg
  • data/sound/good.ogg
  • data/sound/heli_start.ogg
  • data/sound/heli_stop.ogg
  • data/sound/level_success.ogg
  • data/sound/lighting.ogg
  • data/sound/meteor.ogg
  • data/sound/music/music0.ogg
  • data/sound/music/music1.ogg
  • data/sound/music/music2.ogg
  • data/sound/music/music3.ogg
  • data/sound/people_joy.ogg
  • data/sound/res_income.ogg
  • data/sound/respawn.ogg
  • data/sound/salute00.ogg
  • data/sound/salute01.ogg
  • data/sound/salute02.ogg
  • data/sound/ship_start.ogg
  • data/sound/ship_stop.ogg
  • data/sound/start_game.ogg
  • data/sound/stew.ogg
  • data/sound/storm.ogg
  • data/sound/take.ogg
  • data/sound/task_done.ogg
  • data/sound/tremble.ogg
  • data/sound/worker_in.ogg
  • data/sound/worker_out.ogg
  • data/texture/achieve00.lua
  • data/texture/achieve00.png
    .png
  • data/texture/achieve01.lua
  • data/texture/achieve01.png
    .png
  • data/texture/achieve02.lua
  • data/texture/achieve02.png
    .png
  • data/texture/back/back000_b.alpha
    .jpg
  • data/texture/back/back000_b.jpg
    .jpg
  • data/texture/back/back000_t.alpha
    .jpg
  • data/texture/back/back000_t.jpg
    .jpg
  • data/texture/back/back001_b.alpha
    .jpg
  • data/texture/back/back001_b.jpg
    .jpg
  • data/texture/back/back001_t.alpha
    .jpg
  • data/texture/back/back001_t.jpg
    .jpg
  • data/texture/back/back002_b.alpha
    .jpg
  • data/texture/back/back002_b.jpg
    .jpg
  • data/texture/back/back002_t.alpha
    .jpg
  • data/texture/back/back002_t.jpg
    .jpg
  • data/texture/back/back003_b.alpha
    .jpg
  • data/texture/back/back003_b.jpg
    .jpg
  • data/texture/back/back003_t.alpha
    .jpg
  • data/texture/back/back003_t.jpg
    .jpg
  • data/texture/back/back004_b.alpha
    .jpg
  • data/texture/back/back004_b.jpg
    .jpg
  • data/texture/back/back004_t.alpha
    .jpg
  • data/texture/back/back004_t.jpg
    .jpg
  • data/texture/back/back005_b.alpha
    .jpg
  • data/texture/back/back005_b.jpg
    .jpg
  • data/texture/back/back005_t.alpha
    .jpg
  • data/texture/back/back005_t.jpg
    .jpg
  • data/texture/back/back006_b.alpha
    .jpg
  • data/texture/back/back006_b.jpg
    .jpg
  • data/texture/back/back006_t.alpha
    .jpg
  • data/texture/back/back006_t.jpg
    .jpg
  • data/texture/back/back007_b.alpha
    .jpg
  • data/texture/back/back007_b.jpg
    .jpg
  • data/texture/back/back007_t.alpha
    .jpg
  • data/texture/back/back007_t.jpg
    .jpg
  • data/texture/back/back008_b.alpha
    .jpg
  • data/texture/back/back008_b.jpg
    .jpg
  • data/texture/back/back008_t.alpha
    .jpg
  • data/texture/back/back008_t.jpg
    .jpg
  • data/texture/back/back009_b.alpha
    .jpg
  • data/texture/back/back009_b.jpg
    .jpg
  • data/texture/back/back009_t.alpha
    .jpg
  • data/texture/back/back009_t.jpg
    .jpg
  • data/texture/back/back010_b.alpha
    .jpg
  • data/texture/back/back010_b.jpg
    .jpg
  • data/texture/back/back010_t.alpha
    .jpg
  • data/texture/back/back010_t.jpg
    .jpg
  • data/texture/back/back011_b.alpha
    .jpg
  • data/texture/back/back011_b.jpg
    .jpg
  • data/texture/back/back011_t.alpha
    .jpg
  • data/texture/back/back011_t.jpg
    .jpg
  • data/texture/back/back012_b.alpha
    .jpg
  • data/texture/back/back012_b.jpg
    .jpg
  • data/texture/back/back012_t.alpha
    .jpg
  • data/texture/back/back012_t.jpg
    .jpg
  • data/texture/back/back013_b.alpha
    .jpg
  • data/texture/back/back013_b.jpg
    .jpg
  • data/texture/back/back013_t.alpha
    .jpg
  • data/texture/back/back013_t.jpg
    .jpg
  • data/texture/back/back014_b.alpha
    .jpg
  • data/texture/back/back014_b.jpg
    .jpg
  • data/texture/back/back014_t.alpha
    .jpg
  • data/texture/back/back014_t.jpg
    .jpg
  • data/texture/back/back015_b.alpha
    .jpg
  • data/texture/back/back015_b.jpg
    .jpg
  • data/texture/back/back015_t.alpha
    .jpg
  • data/texture/back/back015_t.jpg
    .jpg
  • data/texture/back/back016_b.alpha
    .jpg
  • data/texture/back/back016_b.jpg
    .jpg
  • data/texture/back/back016_t.alpha
    .jpg
  • data/texture/back/back016_t.jpg
    .jpg
  • data/texture/back/back017_b.alpha
    .jpg
  • data/texture/back/back017_b.jpg
    .jpg
  • data/texture/back/back017_t.alpha
    .jpg
  • data/texture/back/back017_t.jpg
    .jpg
  • data/texture/back/back018_b.alpha
    .jpg
  • data/texture/back/back018_b.jpg
    .jpg
  • data/texture/back/back018_t.alpha
    .jpg
  • data/texture/back/back018_t.jpg
    .jpg
  • data/texture/back/back019_b.alpha
    .jpg
  • data/texture/back/back019_b.jpg
    .jpg
  • data/texture/back/back019_t.alpha
    .jpg
  • data/texture/back/back019_t.jpg
    .jpg
  • data/texture/back/back020_b.alpha
    .jpg
  • data/texture/back/back020_b.jpg
    .jpg
  • data/texture/back/back020_t.alpha
    .jpg
  • data/texture/back/back020_t.jpg
    .jpg
  • data/texture/back/back021_b.alpha
    .jpg
  • data/texture/back/back021_b.jpg
    .jpg
  • data/texture/back/back021_t.alpha
    .jpg
  • data/texture/back/back021_t.jpg
    .jpg
  • data/texture/back/back022_b.alpha
    .jpg
  • data/texture/back/back022_b.jpg
    .jpg
  • data/texture/back/back022_t.alpha
    .jpg
  • data/texture/back/back022_t.jpg
    .jpg
  • data/texture/back/back023_b.alpha
    .jpg
  • data/texture/back/back023_b.jpg
    .jpg
  • data/texture/back/back023_t.alpha
    .jpg
  • data/texture/back/back023_t.jpg
    .jpg
  • data/texture/back/back024_b.alpha
    .jpg
  • data/texture/back/back024_b.jpg
    .jpg
  • data/texture/back/back024_t.alpha
    .jpg
  • data/texture/back/back024_t.jpg
    .jpg
  • data/texture/back/back025_b.alpha
    .jpg
  • data/texture/back/back025_b.jpg
    .jpg
  • data/texture/back/back025_t.alpha
    .jpg
  • data/texture/back/back025_t.jpg
    .jpg
  • data/texture/back/back026_b.alpha
    .jpg
  • data/texture/back/back026_b.jpg
    .jpg
  • data/texture/back/back026_t.alpha
    .jpg
  • data/texture/back/back026_t.jpg
    .jpg
  • data/texture/back/back027_b.alpha
    .jpg
  • data/texture/back/back027_b.jpg
    .jpg
  • data/texture/back/back027_t.alpha
    .jpg
  • data/texture/back/back027_t.jpg
    .jpg
  • data/texture/back/back028_b.alpha
    .jpg
  • data/texture/back/back028_b.jpg
    .jpg
  • data/texture/back/back028_t.alpha
    .jpg
  • data/texture/back/back028_t.jpg
    .jpg
  • data/texture/back/back029_b.alpha
    .jpg
  • data/texture/back/back029_b.jpg
    .jpg
  • data/texture/back/back029_t.alpha
    .jpg
  • data/texture/back/back029_t.jpg
    .jpg
  • data/texture/back/back030_b.alpha
    .jpg
  • data/texture/back/back030_b.jpg
    .jpg
  • data/texture/back/back030_t.alpha
    .jpg
  • data/texture/back/back030_t.jpg
    .jpg
  • data/texture/back/back031_b.alpha
    .jpg
  • data/texture/back/back031_b.jpg
    .jpg
  • data/texture/back/back031_t.alpha
    .jpg
  • data/texture/back/back031_t.jpg
    .jpg
  • data/texture/back/back032_b.alpha
    .jpg
  • data/texture/back/back032_b.jpg
    .jpg
  • data/texture/back/back032_t.alpha
    .jpg
  • data/texture/back/back032_t.jpg
    .jpg
  • data/texture/back/back033_b.alpha
    .jpg
  • data/texture/back/back033_b.jpg
    .jpg
  • data/texture/back/back033_t.alpha
    .jpg
  • data/texture/back/back033_t.jpg
    .jpg
  • data/texture/back/back034_b.alpha
    .jpg
  • data/texture/back/back034_b.jpg
    .jpg
  • data/texture/back/back034_t.alpha
    .jpg
  • data/texture/back/back034_t.jpg
    .jpg
  • data/texture/back/back035_b.alpha
    .jpg
  • data/texture/back/back035_b.jpg
    .jpg
  • data/texture/back/back035_t.alpha
    .jpg
  • data/texture/back/back035_t.jpg
    .jpg
  • data/texture/back/back036_b.alpha
    .jpg
  • data/texture/back/back036_b.jpg
    .jpg
  • data/texture/back/back036_t.alpha
    .jpg
  • data/texture/back/back036_t.jpg
    .jpg
  • data/texture/back/back037_b.alpha
    .jpg
  • data/texture/back/back037_b.jpg
    .jpg
  • data/texture/back/back037_t.alpha
    .jpg
  • data/texture/back/back037_t.jpg
    .jpg
  • data/texture/back/back038_b.alpha
    .jpg
  • data/texture/back/back038_b.jpg
    .jpg
  • data/texture/back/back038_t.alpha
    .jpg
  • data/texture/back/back038_t.jpg
    .jpg
  • data/texture/back/back039_b.alpha
    .jpg
  • data/texture/back/back039_b.jpg
    .jpg
  • data/texture/back/back039_t.alpha
    .jpg
  • data/texture/back/back039_t.jpg
    .jpg
  • data/texture/back/back040_b.alpha
    .jpg
  • data/texture/back/back040_b.jpg
    .jpg
  • data/texture/back/back040_t.alpha
    .jpg
  • data/texture/back/back040_t.jpg
    .jpg
  • data/texture/back/back041_b.alpha
    .jpg
  • data/texture/back/back041_b.jpg
    .jpg
  • data/texture/back/back041_t.alpha
    .jpg
  • data/texture/back/back041_t.jpg
    .jpg
  • data/texture/back/back042_b.alpha
    .jpg
  • data/texture/back/back042_b.jpg
    .jpg
  • data/texture/back/back042_t.alpha
    .jpg
  • data/texture/back/back042_t.jpg
    .jpg
  • data/texture/back/back043_b.alpha
    .jpg
  • data/texture/back/back043_b.jpg
    .jpg
  • data/texture/back/back043_t.alpha
    .jpg
  • data/texture/back/back043_t.jpg
    .jpg
  • data/texture/back/back900_b.alpha
    .jpg
  • data/texture/back/back900_b.jpg
    .jpg
  • data/texture/back/back900_t.alpha
    .jpg
  • data/texture/back/back900_t.jpg
    .jpg
  • data/texture/back/back901_b.alpha
    .jpg
  • data/texture/back/back901_b.jpg
    .jpg
  • data/texture/back/back901_t.alpha
    .jpg
  • data/texture/back/back901_t.jpg
    .jpg
  • data/texture/back/back902_b.alpha
    .jpg
  • data/texture/back/back902_b.jpg
    .jpg
  • data/texture/back/back902_t.alpha
    .jpg
  • data/texture/back/back902_t.jpg
    .jpg
  • data/texture/back/back903_b.alpha
    .jpg
  • data/texture/back/back903_b.jpg
    .jpg
  • data/texture/back/back903_t.alpha
    .jpg
  • data/texture/back/back903_t.jpg
    .jpg
  • data/texture/back/back904_b.alpha
    .jpg
  • data/texture/back/back904_b.jpg
    .jpg
  • data/texture/back/back904_t.alpha
    .jpg
  • data/texture/back/back904_t.jpg
    .jpg
  • data/texture/back/back905_b.alpha
    .jpg
  • data/texture/back/back905_b.jpg
    .jpg
  • data/texture/back/back905_t.alpha
    .jpg
  • data/texture/back/back905_t.jpg
    .jpg
  • data/texture/bar00.lua
  • data/texture/bar00.png
    .png
  • data/texture/bar01.lua
  • data/texture/bar01.png
    .png
  • data/texture/boat.lua
  • data/texture/boat.png
    .png
  • data/texture/bonus.lua
  • data/texture/bonus.png
    .png
  • data/texture/build00.lua
  • data/texture/build00.png
    .png
  • data/texture/caustic.jpg
    .jpg
  • data/texture/caustic.lua
  • data/texture/decor00.lua
  • data/texture/decor00.png
    .png
  • data/texture/editor.lua
  • data/texture/editor.png
    .png
  • data/texture/finish00.jpg
    .jpg
  • data/texture/firework.lua
  • data/texture/firework.png
    .png
  • data/texture/fish00.lua
  • data/texture/fish00.png
    .png
  • data/texture/gui/cursor_pointer.png
    .png
  • data/texture/gui/gui_arrow.png
    .png
  • data/texture/gui/gui_cup.lua
  • data/texture/gui/gui_cup.png
    .png
  • data/texture/gui/gui_frame00.png
    .png
  • data/texture/gui/gui_frame01.png
    .png
  • data/texture/gui/gui_lang.png
    .png
  • data/texture/gui/gui_main.lua
  • data/texture/gui/gui_main.png
    .png
  • data/texture/gui/icon_error.png
    .png
  • data/texture/gui/icon_info.png
    .png
  • data/texture/gui/icon_question.png
    .png
  • data/texture/gui/icon_warning.png
    .png
  • data/texture/helicopter.lua
  • data/texture/helicopter.png
    .png
  • data/texture/heliport.lua
  • data/texture/heliport.png
    .png
  • data/texture/highlight.lua
  • data/texture/highlight.png
    .png
  • data/texture/icon00.lua
  • data/texture/icon00.png
    .png
  • data/texture/intro00.jpg
    .jpg
  • data/texture/locale/en/gui_logo.png
    .png
  • data/texture/locale/ru/gui_logo.png
    .png
  • data/texture/man001.lua
  • data/texture/man001.png
    .png
  • data/texture/man002.lua
  • data/texture/man002.png
    .png
  • data/texture/man003.lua
  • data/texture/man003.png
    .png
  • data/texture/map00.lua
  • data/texture/map00.png
    .png
  • data/texture/medic00.lua
  • data/texture/medic00.png
    .png
  • data/texture/part00.png
    .png
  • data/texture/part01.png
    .png
  • data/texture/part02.jpg
    .jpg
  • data/texture/part03.png
    .png
  • data/texture/part04.png
    .png
  • data/texture/part05.png
    .png
  • data/texture/part06.png
    .png
  • data/texture/part07.png
    .png
  • data/texture/river00.jpg
    .jpg
  • data/texture/river00.lua
  • data/texture/river01.jpg
    .jpg
  • data/texture/river01.lua
  • data/texture/road00.lua
  • data/texture/road00.png
    .png
  • data/texture/rt2_00.lua
  • data/texture/rt2_00.png
    .png
  • data/texture/screw.lua
  • data/texture/screw.png
    .png
  • data/texture/splash/alawar.jpg
    .jpg
  • data/texture/splash/logo.jpg
    .jpg
  • data/texture/system/gui_loading.jpg
    .jpg
  • data/texture/system/gui_loading_progress.jpg
    .jpg
  • data/texture/system/gui_system.png
    .png
  • data/texture/underwater.jpg
    .jpg
  • data/texture/underwater.lua
  • data/texture/widescreen.jpg
    .jpg
  • data/texture/worker010.lua
  • data/texture/worker010.png
    .png
  • data/texture/worker011.lua
  • data/texture/worker011.png
    .png
  • data/texture/worker012.lua
  • data/texture/worker012.png
    .png
  • data/texture/worker013.lua
  • data/texture/worker013.png
    .png
  • data/texture/worker014.lua
  • data/texture/worker014.png
    .png
  • data/texture/worker015.lua
  • data/texture/worker015.png
    .png
  • data/texture/worker016.lua
  • data/texture/worker016.png
    .png
  • game_8819.tbd
  • tbc_pic/pic_8819.jpg
    .jpg
  • tbc_pic/pic_8819_big_eng.jpg
    .jpg
  • tbc_pic/pic_8819_big_rus.jpg
    .jpg
  • tbgr.exe
    .exe windows:5 windows x86 arch:x86

    639172c969cf2816579eeec6096bb435


    Headers

    Imports

    Sections

  • tbgrun.exe
    .exe windows:5 windows x86 arch:x86

    639172c969cf2816579eeec6096bb435


    Headers

    Imports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections