General

  • Target

    72f633f58d227097bfdecfe376d43a33_JaffaCakes118

  • Size

    8.2MB

  • MD5

    72f633f58d227097bfdecfe376d43a33

  • SHA1

    326ddce87207893711a87ba68b53a61da368947c

  • SHA256

    c65046f87d5ceebfe71df19347ce5e768354b4a160d9b9f5b4a753c5dab06ff2

  • SHA512

    ed8c23be8ca9126b7870c0cdb6c0d8cb20213b1d5b8781db6f6574825e5fcb982c6a11890f0afd4165cf8b07b824bb401f3b7b916a85548c8f74b2dbf4714556

  • SSDEEP

    196608:uB0vB4AxB1OsjEO99SacEYaokwEfV5vrI4FgBDpbY:uBG4oSagb/2jIkgTbY

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 27 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 72f633f58d227097bfdecfe376d43a33_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MyNsisExtend.dll
    .dll windows:4 windows x86 arch:x86

    9cb11d0d4bed69c64ae8d0549b4ce4ce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/locate.dll
    .dll windows:4 windows x86 arch:x86

    7f8181c74f882a780c7cd485241e8b51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRandom.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_89_/GMSkin_Image_2012_v1.zip
    .zip
  • skin.xml
  • skin/Thumbs.db
  • skin/icon1.png
    .png
  • skin/保存目录.png
    .png
  • skin/关闭.png
    .png
  • skin/协议背景.png
    .png
  • skin/卸载背景.png
    .png
  • skin/图片背景框.png
    .png
  • skin/多选.png
    .png
  • skin/安装.png
    .png
  • skin/安装01.png
    .png
  • skin/安装02.png
    .png
  • skin/安装03.png
    .png
  • skin/安装04.png
    .png
  • skin/安装05.png
    .png
  • skin/安装协议.png
    .png
  • skin/安装完成.png
    .png
  • skin/安装完成按钮.png
    .png
  • skin/完成.png
    .png
  • skin/广告关闭.png
    .png
  • skin/按钮.png
    .png
  • skin/最小化.png
    .png
  • skin/最小化2.png
    .png
  • skin/格子.png
    .png
  • skin/欢迎.png
    .png
  • skin/浏览.png
    .png
  • skin/游戏弹出.png
    .png
  • skin/软件弹出.png
    .png
  • skin/进度条.png
    .png
  • skin/进度条背景.png
    .png
  • skin/选项.png
    .png
  • skin/默认背景.png
    .png
  • $TEMP/$_89_/MyNsisSkin.dll
    .dll windows:4 windows x86 arch:x86

    8b2c18b411d31cbef33f61e5be07509a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_89_/config.dat
  • $TEMP/$_89_/game.jpg
    .jpg
  • ExeConfig.ini
  • OpenAL32.dll
    .dll windows:4 windows x86 arch:x86

    e698fbc8079aea6590ef57261e8a66c8


    Headers

    Imports

    Exports

    Sections

  • SDL.dll
    .dll windows:4 windows x86 arch:x86

    baed49d4d8566148ea0189bf10f319db


    Headers

    Imports

    Exports

    Sections

  • cg.dll
    .dll windows:4 windows x86 arch:x86

    b2f0a098e2f58722cd49b159293fd7b1


    Headers

    Imports

    Exports

    Sections

  • cgGL.dll
    .dll windows:4 windows x86 arch:x86

    9236af486241f0241f24a97e78db6c02


    Headers

    Imports

    Exports

    Sections

  • data/arena-border-0.png
    .png
  • data/arena-border-1.png
    .png
  • data/arena-border-blue.png
    .png
  • data/arena-border-red.png
    .png
  • data/bg.png
    .png
  • data/birdman-big.fontdef
  • data/birdman-big.png
    .png
  • data/birdman-medium.fontdef
  • data/birdman-medium.png
    .png
  • data/birdman-mono-digits.fontdef
  • data/birdman-mono-digits.png
    .png
  • data/birdman-small.fontdef
  • data/birdman-small.png
    .png
  • data/blue-explosion.png
    .png
  • data/blue-ring.png
    .png
  • data/bomb-flash.png
    .png
  • data/bomb.png
    .png
  • data/bomber.mtl
  • data/bomber.obj
  • data/brute.mtl
  • data/brute.obj
  • data/crosshair-arrow.png
    .png
  • data/cursor.png
    .png
  • data/dna-texture.png
    .png
  • data/duck-trail.png
    .png
  • data/duck.mtl
  • data/duck.obj
  • data/dump.bin
  • data/envmap.png
    .png
  • data/evolved-duck.mtl
  • data/evolved-duck.obj
  • data/explosion-1.wav
  • data/explosion-2.wav
  • data/explosion.png
    .png
  • data/fast-duck.mtl
  • data/fast-duck.obj
  • data/flare.png
    .png
  • data/frag_shader.cg
  • data/halo.png
    .png
  • data/highscores.txt
  • data/homing-trail.png
    .png
  • data/intro-logo.png
    .png
  • data/jarhead.mtl
  • data/jarhead.obj
  • data/key-big-selected.png
    .png
  • data/key-big.png
    .png
  • data/key-selected.png
    .png
  • data/key.png
    .png
  • data/laser-bounce.png
    .png
  • data/laser-segment.png
    .png
  • data/level-0.txt
  • data/level-1.txt
  • data/level-transition.wav
  • data/menu-selection.wav
  • data/missile.png
    .png
  • data/ninja-trail.png
    .png
  • data/ninja.mtl
  • data/ninja.obj
  • data/options.txt
  • data/power-shot-particle.png
    .png
  • data/powerup-1.wav
  • data/powerup-2.wav
  • data/pu-bouncy-shots.png
    .png
  • data/pu-extra-cannon.png
    .png
  • data/pu-extra-ship.png
    .png
  • data/pu-homing-missile.png
    .png
  • data/pu-laser.png
    .png
  • data/pu-power-shots.png
    .png
  • data/pu-shield.png
    .png
  • data/pu-side-cannon.png
    .png
  • data/purple-missile.png
    .png
  • data/ring.png
    .png
  • data/settings.txt
  • data/shield.png
    .png
  • data/ship001.mtl
  • data/ship001.obj
  • data/ship002.mtl
  • data/ship002.obj
  • data/ship01_v001_uvmap.png
    .png
  • data/shot-1.wav
  • data/shot-2.wav
  • data/shot-3.wav
  • data/shot-particle.png
    .png
  • data/spaceship-small.png
    .png
  • data/spaceship-white.png
    .png
  • data/sphere-texture.png
    .png
  • data/tex_frag_shader.cg
  • data/tex_vert_shader.cg
  • data/vert_shader.cg
  • data/virus.ogg
  • game.ico
  • glew32.dll
    .dll windows:4 windows x86 arch:x86

    d91096127df2a34a497797157d11e70c


    Headers

    Imports

    Exports

    Sections

  • protozoa.exe
    .exe windows:4 windows x86 arch:x86

    f8aaf9173348eba4525d85bee6c8f3bf


    Headers

    Imports

    Sections

  • stderr.txt
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MyNsisExtend.dll
    .dll windows:4 windows x86 arch:x86

    9cb11d0d4bed69c64ae8d0549b4ce4ce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRandom.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $TEMP/$_90_/GMSkin_Image_2012_v1.zip
    .zip
  • skin.xml
  • skin/Thumbs.db
  • skin/icon1.png
    .png
  • skin/保存目录.png
    .png
  • skin/关闭.png
    .png
  • skin/协议背景.png
    .png
  • skin/卸载背景.png
    .png
  • skin/图片背景框.png
    .png
  • skin/多选.png
    .png
  • skin/安装.png
    .png
  • skin/安装01.png
    .png
  • skin/安装02.png
    .png
  • skin/安装03.png
    .png
  • skin/安装04.png
    .png
  • skin/安装05.png
    .png
  • skin/安装协议.png
    .png
  • skin/安装完成.png
    .png
  • skin/安装完成按钮.png
    .png
  • skin/完成.png
    .png
  • skin/广告关闭.png
    .png
  • skin/按钮.png
    .png
  • skin/最小化.png
    .png
  • skin/最小化2.png
    .png
  • skin/格子.png
    .png
  • skin/欢迎.png
    .png
  • skin/浏览.png
    .png
  • skin/游戏弹出.png
    .png
  • skin/软件弹出.png
    .png
  • skin/进度条.png
    .png
  • skin/进度条背景.png
    .png
  • skin/选项.png
    .png
  • skin/默认背景.png
    .png
  • $TEMP/$_90_/MyNsisExtend.dll
    .dll windows:4 windows x86 arch:x86

    9cb11d0d4bed69c64ae8d0549b4ce4ce


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_90_/MyNsisSkin.dll
    .dll windows:4 windows x86 arch:x86

    8b2c18b411d31cbef33f61e5be07509a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_90_/unconfig.dat
  • wrap_oal.dll
    .dll windows:4 windows x86 arch:x86

    09e406fcf0603f26d75bd32ded2f88a7


    Headers

    Imports

    Exports

    Sections

  • ʼϷ.exe
    .exe windows:4 windows x86 arch:x86

    db14222dff4ad9d88d8e8a3d01d8328c


    Headers

    Imports

    Exports

    Sections