General

  • Target

    750458a77011db80e23176fd472d7fa3_JaffaCakes118

  • Size

    3.3MB

  • MD5

    750458a77011db80e23176fd472d7fa3

  • SHA1

    a407d65888ae7657191293379513e5575b82ca16

  • SHA256

    acc1ae40f75c954c644989938f69e530df94ff36e87382024261d88ff69813af

  • SHA512

    348b0f2016ef1182bc7ea60035cddb2b2c6047e9c4abc8754dcbb3bc2fa6711d4a048e2a7a28b9c32aa806fe4842073ebaa9bb179fd51da02be857a066ba0e24

  • SSDEEP

    49152:2be2YpqX1bXAEtpK36nulgyJUPh9Hj+hR7KUVXPU4b3qPN6kfB3Gjp7z94RmZt+:UVXnpK9lguUZ+hRWGU80JJ2NtDt+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 27 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • 750458a77011db80e23176fd472d7fa3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e160ef8e55bb9d162da4e266afd9eef3


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsCommon.dll
    .dll windows:5 windows x86 arch:x86

    077cc3a785116385258c491e025a194d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    a49b0342971aa199fc6349725b90146d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsReport.dll
    .dll windows:5 windows x86 arch:x86

    d58483f46f78420d4480ab37c61be12b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    79e802507623a06d443318041e7ac7a7


    Headers

    Imports

    Exports

    Sections

  • server_update.7z
    .7z
  • MonkDns.dll
    .exe windows:5 windows x86 arch:x86

    d2634622fa0cd7b6d2cc86a982c3d981


    Headers

    Imports

    Sections

  • NetResSDK.dll
    .dll windows:6 windows x86 arch:x86

    46c96b3e54c12da005a866a9fdcc075c


    Headers

    Imports

    Exports

    Sections

  • NetTunnel.dll
    .dll windows:5 windows x86 arch:x86

    47116a2a5bd015c0e4f24cfa6376a72b


    Headers

    Imports

    Exports

    Sections

  • STUiLib.dll
    .dll windows:5 windows x86 arch:x86

    856d9c38826f86680bbbe42dc6c19137


    Headers

    Imports

    Exports

    Sections

  • Skins/AreaListItem.xml
  • Skins/CardMenu.xml
    .xml
  • Skins/ChooseNodeWnd.xml
    .xml
  • Skins/ExitWnd.xml
    .xml
  • Skins/GameCard.xml
  • Skins/LoginWnd.xml
    .xml
  • Skins/MainSkin.xml
    .xml
  • Skins/NodeListItem.xml
  • Skins/NoticeWnd.xml
    .xml
  • Skins/PurchaseWnd.xml
    .xml
  • Skins/SetMenu.xml
    .xml
  • Skins/SysSetWnd.xml
    .xml
  • Skins/TipLoginWnd.xml
    .xml
  • Skins/TipLogoutWnd.xml
    .xml
  • Skins/UpdateWnd.xml
    .xml
  • Skins/res/bootani/borders/1.png
    .png
  • Skins/res/bootani/borders/10.png
    .png
  • Skins/res/bootani/borders/11.png
    .png
  • Skins/res/bootani/borders/12.png
    .png
  • Skins/res/bootani/borders/13.png
    .png
  • Skins/res/bootani/borders/14.png
    .png
  • Skins/res/bootani/borders/15.png
    .png
  • Skins/res/bootani/borders/16.png
    .png
  • Skins/res/bootani/borders/17.png
    .png
  • Skins/res/bootani/borders/18.png
    .png
  • Skins/res/bootani/borders/19.png
    .png
  • Skins/res/bootani/borders/2.png
    .png
  • Skins/res/bootani/borders/20.png
    .png
  • Skins/res/bootani/borders/3.png
    .png
  • Skins/res/bootani/borders/4.png
    .png
  • Skins/res/bootani/borders/5.png
    .png
  • Skins/res/bootani/borders/6.png
    .png
  • Skins/res/bootani/borders/7.png
    .png
  • Skins/res/bootani/borders/8.png
    .png
  • Skins/res/bootani/borders/9.png
    .png
  • Skins/res/bootani/step1/1.png
    .png
  • Skins/res/bootani/step1/10.png
    .png
  • Skins/res/bootani/step1/11.png
    .png
  • Skins/res/bootani/step1/12.png
    .png
  • Skins/res/bootani/step1/13.png
    .png
  • Skins/res/bootani/step1/2.png
    .png
  • Skins/res/bootani/step1/3.png
    .png
  • Skins/res/bootani/step1/4.png
    .png
  • Skins/res/bootani/step1/5.png
    .png
  • Skins/res/bootani/step1/6.png
    .png
  • Skins/res/bootani/step1/7.png
    .png
  • Skins/res/bootani/step1/8.png
    .png
  • Skins/res/bootani/step1/9.png
    .png
  • Skins/res/bootani/step2/1.png
    .png
  • Skins/res/bootani/step3/1.png
    .png
  • Skins/res/bootani/step3/2.png
    .png
  • Skins/res/bootani/step3/3.png
    .png
  • Skins/res/bootani/step3/4.png
    .png
  • Skins/res/box_check.png
    .png
  • Skins/res/box_normal.png
    .png
  • Skins/res/btn_ad.png
    .png
  • Skins/res/btn_adgame.png
    .png
  • Skins/res/btn_close_hover.png
    .png
  • Skins/res/btn_close_normal.png
    .png
  • Skins/res/btn_left.png
    .png
  • Skins/res/btn_min_hover.png
    .png
  • Skins/res/btn_min_normal.png
    .png
  • Skins/res/btn_no_hover.png
    .png
  • Skins/res/btn_no_normal.png
    .png
  • Skins/res/btn_notice_hover.png
    .png
  • Skins/res/btn_notice_normal.png
    .png
  • Skins/res/btn_opt.png
    .png
  • Skins/res/btn_right.png
    .png
  • Skins/res/btn_set_hover.png
    .png
  • Skins/res/btn_set_normal.png
    .png
  • Skins/res/btn_speed_hover.png
    .png
  • Skins/res/btn_speed_normal.png
    .png
  • Skins/res/btn_web_close.png
    .png
  • Skins/res/btn_yes_hover.png
    .png
  • Skins/res/btn_yes_normal.png
    .png
  • Skins/res/loading/1.png
    .png
  • Skins/res/loading/10.png
    .png
  • Skins/res/loading/11.png
    .png
  • Skins/res/loading/12.png
    .png
  • Skins/res/loading/13.png
    .png
  • Skins/res/loading/14.png
    .png
  • Skins/res/loading/15.png
    .png
  • Skins/res/loading/16.png
    .png
  • Skins/res/loading/17.png
    .png
  • Skins/res/loading/18.png
    .png
  • Skins/res/loading/19.png
    .png
  • Skins/res/loading/2.png
    .png
  • Skins/res/loading/20.png
    .png
  • Skins/res/loading/21.png
    .png
  • Skins/res/loading/22.png
    .png
  • Skins/res/loading/23.png
    .png
  • Skins/res/loading/24.png
    .png
  • Skins/res/loading/25.png
    .png
  • Skins/res/loading/3.png
    .png
  • Skins/res/loading/4.png
    .png
  • Skins/res/loading/5.png
    .png
  • Skins/res/loading/6.png
    .png
  • Skins/res/loading/7.png
    .png
  • Skins/res/loading/8.png
    .png
  • Skins/res/loading/9.png
    .png
  • Skins/res/logo.png
    .png
  • Skins/res/mask.jpg
    .jpg
  • Skins/res/maskimg.png
    .png
  • Skins/res/opt_moregame_hover.png
    .png
  • Skins/res/opt_moregame_normal.png
    .png
  • Skins/res/opt_moregame_selected.png
    .png
  • Skins/res/opt_mygame_hover.png
    .png
  • Skins/res/opt_mygame_normal.png
    .png
  • Skins/res/opt_mygame_selected.png
    .png
  • Skins/res/ping_green.png
    .png
  • Skins/res/ping_orange.png
    .png
  • Skins/res/ping_red.png
    .png
  • Skins/res/pr.png
    .png
  • Skins/res/pr_bg.png
    .png
  • Skins/res/radio_check.png
    .png
  • Skins/res/radio_normal.png
    .png
  • Skins/res/scrollbar.png
    .png
  • Skins/res/splitshadow.png
    .png
  • Skins/res/update_bg.png
    .png
  • Skins/res/user.png
    .png
  • Skins/res/vip.png
    .png
  • TapTunnel.dll
    .dll windows:5 windows x86 arch:x86

    a82dd92680df4c343e6a5592f94dc41c


    Headers

    Imports

    Exports

    Sections

  • TunnelSDK.dll
    .dll windows:5 windows x86 arch:x86

    48a9d97cd870f79573a60c081e78804c


    Headers

    Imports

    Exports

    Sections

  • XMNetSpeeder.exe
    .exe windows:5 windows x86 arch:x86

    9fc359f3fba2bcd7ce8ebf30b6d7d3cc


    Headers

    Imports

    Sections

  • glog.dll
    .dll windows:5 windows x86 arch:x86

    3b741d454d00b69acdd89f3794999a8d


    Headers

    Imports

    Exports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nfapi.dll
    .dll windows:5 windows x86 arch:x86

    aa4ba83cca4a96954f15ed52e6648b93


    Headers

    Imports

    Exports

    Sections

  • ov/libeay32.dll
    .dll windows:4 windows x86 arch:x86

    cabf208701fbdbc9205ef4e36360c933


    Headers

    Imports

    Exports

    Sections

  • ov/liblzo2-2.dll
    .dll windows:4 windows x86 arch:x86

    1392a6aaf395c44c2abe8956a2d6714d


    Headers

    Imports

    Exports

    Sections

  • ov/libpkcs11-helper-1.dll
    .dll windows:4 windows x86 arch:x86

    81070e0a020827ad468704c4612eb404


    Headers

    Imports

    Exports

    Sections

  • ov/openvpn.exe
    .exe windows:4 windows x86 arch:x86

    e175599a6ef5c83e26dfdf32df5dd740


    Headers

    Imports

    Sections

  • ov/ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    6362d4d7dd8cc11cf260dd4dd08ebcca


    Headers

    Imports

    Exports

    Sections

  • ov/tap-windows.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • bin/tapinstall.exe
    .exe windows:6 windows x64 arch:x64

    59dfe5c9f961f1417775cd3a41a8be62


    Code Sign

    Headers

    Imports

    Sections

  • driver/OemVista.inf
  • driver/tap0901.cat
  • driver/tap0901.sys
    .sys windows:6 windows x64 arch:x64

    a13cebc938af36dab20cc614c6fb7e94


    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    e160ef8e55bb9d162da4e266afd9eef3


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    a49b0342971aa199fc6349725b90146d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsReport.dll
    .dll windows:5 windows x86 arch:x86

    d58483f46f78420d4480ab37c61be12b


    Headers

    Imports

    Exports

    Sections