General

  • Target

    3afe2f7b5249ee0a26b24fad9ac081d8_JaffaCakes118

  • Size

    5.3MB

  • MD5

    3afe2f7b5249ee0a26b24fad9ac081d8

  • SHA1

    d09579897b2dfa0294d549cf01793e87610a0f28

  • SHA256

    164777d346f473824f6ed108a43e5958af34a1622b1471898bbeb5e0dd9290a7

  • SHA512

    0950638e010cbf0b233da1399d844d45a010466b53a5d231f07eb506aed3786966d467b521cdc836e3be30de393f6d03bdf23731ca34c07a8b5d41e54e558f9d

  • SSDEEP

    98304:2QwUVkNCKHCn//OZ+RYI5dyGJ9fY6B6nlIrPtILpm4gMmjQPSSe4mbOdvqJnsRJf:Nw7EKHC3OIRtHl/fnBOluPtap7ccPa4r

Score
3/10

Malware Config

Signatures

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • 3afe2f7b5249ee0a26b24fad9ac081d8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e160ef8e55bb9d162da4e266afd9eef3


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsCommon.dll
    .dll windows:5 windows x86 arch:x86

    077cc3a785116385258c491e025a194d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    a49b0342971aa199fc6349725b90146d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:4 windows x86 arch:x86

    93de66a5e39e0e29fa0c7c11ceeed8e4


    Headers

    Imports

    Exports

    Sections

  • server_update.7z
    .7z
  • NetResSDK.dll
    .dll windows:6 windows x86 arch:x86

    25ebf52e21247289fcc085853a32a67a


    Headers

    Imports

    Exports

    Sections

  • STCEF2.dll
    .dll windows:5 windows x86 arch:x86

    fdc8208d0470b97c59b1e4bd21d41fb8


    Headers

    Imports

    Exports

    Sections

  • STUiLib.dll
    .dll windows:5 windows x86 arch:x86

    8efe4beef079776e2ab8df7e5e8013bb


    Headers

    Imports

    Exports

    Sections

  • Skins/AreaListItem.xml
  • Skins/ChooseNodeWnd.xml
    .xml
  • Skins/MainSkin.xml
    .xml
  • Skins/NodeListItem.xml
  • Skins/WebContainer.xml
    .xml
  • Skins/res/bg.png
    .png
  • Skins/res/btn_cancel_hover.png
    .png
  • Skins/res/btn_cancel_normal.png
    .png
  • Skins/res/btn_choose_hover.png
    .png
  • Skins/res/btn_choose_normal.png
    .png
  • Skins/res/btn_chooseconfirm_hover.png
    .png
  • Skins/res/btn_chooseconfirm_normal.png
    .png
  • Skins/res/btn_close_hover.png
    .png
  • Skins/res/btn_close_normal.png
    .png
  • Skins/res/btn_leftmore_hover.png
    .png
  • Skins/res/btn_leftmore_normal.png
    .png
  • Skins/res/btn_login_hover.png
    .png
  • Skins/res/btn_login_normal.png
    .png
  • Skins/res/btn_min_hover.png
    .png
  • Skins/res/btn_min_normal.png
    .png
  • Skins/res/btn_rightmore_hover.png
    .png
  • Skins/res/btn_rightmore_normal.png
    .png
  • Skins/res/btn_showinfo_hover.png
    .png
  • Skins/res/btn_showinfo_normal.png
    .png
  • Skins/res/btn_start_disable.png
    .png
  • Skins/res/btn_start_hover.png
    .png
  • Skins/res/btn_start_normal.png
    .png
  • Skins/res/btn_stop_hover.png
    .png
  • Skins/res/btn_stop_normal.png
    .png
  • Skins/res/btn_suer_normal.png
    .png
  • Skins/res/btn_sure_hover.png
    .png
  • Skins/res/btn_tipactive_hover.png
    .png
  • Skins/res/btn_tipactive_normal.png
    .png
  • Skins/res/btn_tipclose_hover.png
    .png
  • Skins/res/btn_tipclose_normal.png
    .png
  • Skins/res/btn_tiplogin_hover.png
    .png
  • Skins/res/btn_tiplogin_normal.png
    .png
  • Skins/res/btn_tippay_hover.png
    .png
  • Skins/res/btn_tippay_normal.png
    .png
  • Skins/res/check.png
    .png
  • Skins/res/checkbk.png
    .png
  • Skins/res/checked.png
    .png
  • Skins/res/choosenodebk.png
    .png
  • Skins/res/circle.gif
    .gif
  • Skins/res/circle.png
    .png
  • Skins/res/icon.png
    .png
  • Skins/res/label_stopping.png
    .png
  • Skins/res/nodeinfo_bg.png
    .png
  • Skins/res/opt_game_normal.png
    .png
  • Skins/res/opt_game_selected.png
    .png
  • Skins/res/pgs_empty.png
    .png
  • Skins/res/pgs_full.png
    .png
  • Skins/res/ping_green.png
    .png
  • Skins/res/ping_grey.png
    .png
  • Skins/res/ping_orange.png
    .png
  • Skins/res/ping_red.png
    .png
  • Skins/res/pingload.gif
    .gif
  • Skins/res/rocketready.png
    .png
  • Skins/res/scrollbar.png
    .png
  • Skins/res/success.gif
    .gif
  • Skins/res/tipwnd.png
    .png
  • Skins/res/unselectable.png
    .png
  • XMNetSpeeder.exe
    .exe windows:5 windows x86 arch:x86

    b2beca84e03fd4407df3186210b9363e


    Headers

    Imports

    Sections

  • bin/1.txt
  • bin/c_rehash
    .sh linux
  • bin/libeay32.dll
    .dll windows:4 windows x86 arch:x86

    cabf208701fbdbc9205ef4e36360c933


    Headers

    Imports

    Exports

    Sections

  • bin/liblzo2-2.dll
    .dll windows:4 windows x86 arch:x86

    1392a6aaf395c44c2abe8956a2d6714d


    Headers

    Imports

    Exports

    Sections

  • bin/libpkcs11-helper-1.dll
    .dll windows:4 windows x86 arch:x86

    81070e0a020827ad468704c4612eb404


    Headers

    Imports

    Exports

    Sections

  • bin/openssl.exe
    .exe windows:4 windows x86 arch:x86

    29f1b08744a45d3a5762d27d5b17602b


    Headers

    Imports

    Exports

    Sections

  • bin/openvpn-gui.exe
    .exe windows:4 windows x86 arch:x86

    19deb4e89047cd11601e9bf12b1b5aa4


    Headers

    Imports

    Exports

    Sections

  • bin/openvpn.exe
    .exe windows:4 windows x86 arch:x86

    e175599a6ef5c83e26dfdf32df5dd740


    Headers

    Imports

    Sections

  • bin/openvpnserv.exe
    .exe windows:4 windows x86 arch:x86

    a11fa167e101d1c5244022cd4de39d35


    Headers

    Imports

    Sections

  • bin/openvpnserv2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • bin/ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    6362d4d7dd8cc11cf260dd4dd08ebcca


    Headers

    Imports

    Exports

    Sections

  • bin/tap-windows.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • bin/tapinstall.exe
    .exe windows:6 windows x64 arch:x64

    59dfe5c9f961f1417775cd3a41a8be62


    Code Sign

    Headers

    Imports

    Sections

  • driver/OemVista.inf
  • driver/tap0901.cat
  • driver/tap0901.sys
    .sys windows:6 windows x64 arch:x64

    a13cebc938af36dab20cc614c6fb7e94


    Headers

    Imports

    Sections

  • config/README.txt
  • config/gameacc.ovpn
  • config/login.txt
  • interface_layer.dll
    .dll windows:5 windows x86 arch:x86

    05ea8e8bb9bd5e5af809fd6a5b3eb5b7


    Headers

    Imports

    Exports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • rkcfg.ini
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    e160ef8e55bb9d162da4e266afd9eef3


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    a49b0342971aa199fc6349725b90146d


    Headers

    Imports

    Exports

    Sections