Overview

overview

7

Static

static

3

758f6e9ea0...18.exe

windows7-x64

7

758f6e9ea0...18.exe

windows10-2004-x64

7

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nd.dll

windows7-x64

3

$PLUGINSDI...nd.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

3DMGAME �...̳.url

windows7-x64

1

3DMGAME �...̳.url

windows10-2004-x64

1

3dm/jquery.js

windows7-x64

3

3dm/jquery.js

windows10-2004-x64

3

3dm/main.html

windows7-x64

1

3dm/main.html

windows10-2004-x64

1

3dm/main_f...min.js

windows7-x64

3

3dm/main_f...min.js

windows10-2004-x64

3

Update.exe

windows7-x64

3

Update.exe

windows10-2004-x64

3

data/RPG_RT.exe

windows7-x64

1

data/RPG_RT.exe

windows10-2004-x64

1

killer bear.exe

windows7-x64

1

killer bear.exe

windows10-2004-x64

6

ɱ�...��.exe

windows7-x64

1

ɱ�...��.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    758f6e9ea0eb3b97e63d11072eb6e2f7_JaffaCakes118

  • Size

    4.4MB

  • MD5

    758f6e9ea0eb3b97e63d11072eb6e2f7

  • SHA1

    2d6840473be4118eafb9c08f02145e7e2d53614d

  • SHA256

    ad9b1a01ed650b8d615f736320f2b163e7244390c721fd6c84104c78e48ea561

  • SHA512

    1304ac7d2e0cbf65e451ab086c3291352921f15227f06b092acd8c749d3a6b61b7fecc8e2b9aaa4316f4d7701a2b41edbe602a43551af3404c860e8a7cf4df8a

  • SSDEEP

    98304:yDCh7U+/mFf+KXDxPpgHgVSFcUZsGGy6pSiZK:3R/e+IDlpEYSFc5GaMOK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 758f6e9ea0eb3b97e63d11072eb6e2f7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e160ef8e55bb9d162da4e266afd9eef3


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3fe69ff2de04834c67a82c79fa52ebe2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MyNsisExtend.dll
    .dll windows:4 windows x86 arch:x86

    0b0f6f2578ce650dcdda31f442fb709d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • 3DMGAME йһϷŻ ȫ󺺻Ϸ̳.url
  • 3dm/BeInstall/insert.3dmci
  • 3dm/BeInstall/insert.ini
  • 3dm/jquery.js
    .js
  • 3dm/main.html
    .html
  • 3dm/main_files/29--22.gif
  • 3dm/main_files/ad.jpg
    .jpg
  • 3dm/main_files/bg.png
    .png
  • 3dm/main_files/btn2.gif
    .gif
  • 3dm/main_files/btnhover.gif
    .gif
  • 3dm/main_files/highlight.png
    .png
  • 3dm/main_files/jquery-1.7.2.min.js
    .js
  • 3dm/startgame_btn.bmp
  • 3dmConfig.ini
  • ExeConfig.ini
  • Update.exe
    .exe windows:5 windows x86 arch:x86

    53380a83ed4ba9ff81e8531622ed0e1f


    Headers

    Imports

    Sections

  • data/Battle/fukidashi.xyz
  • data/CharSet/children.xyz
  • data/CharSet/children2.xyz
  • data/CharSet/death.xyz
  • data/CharSet/killerbear.xyz
  • data/CharSet/none.xyz
  • data/CharSet/other.xyz
  • data/CharSet/take.xyz
  • data/ChipSet/room.xyz
  • data/ChipSet/street.xyz
  • data/FaceSet/face.xyz
  • data/GameOver/gameover.xyz
  • data/Map0001.lmu
  • data/Map0002.lmu
  • data/Map0003.lmu
  • data/Map0004.lmu
  • data/Map0005.lmu
  • data/Map0006.lmu
  • data/Map0007.lmu
  • data/Map0008.lmu
  • data/Map0009.lmu
  • data/Map0010.lmu
  • data/Map0011.lmu
  • data/Map0012.lmu
  • data/Map0013.lmu
  • data/Map0014.lmu
  • data/Map0015.lmu
  • data/Map0016.lmu
  • data/Map0017.lmu
  • data/Map0018.lmu
  • data/Map0019.lmu
  • data/Map0020.lmu
  • data/Map0021.lmu
  • data/Map0022.lmu
  • data/Map0023.lmu
  • data/Map0024.lmu
  • data/Map0025.lmu
  • data/Map0026.lmu
  • data/Map0027.lmu
  • data/Map0028.lmu
  • data/Map0029.lmu
  • data/Map0030.lmu
  • data/Map0031.lmu
  • data/Map0032.lmu
  • data/Map0033.lmu
  • data/Map0034.lmu
  • data/Map0035.lmu
  • data/Map0036.lmu
  • data/Map0037.lmu
  • data/Map0038.lmu
  • data/Map0039.lmu
  • data/Map0040.lmu
  • data/Map0041.lmu
  • data/Map0042.lmu
  • data/Map0043.lmu
  • data/Map0044.lmu
  • data/Map0045.lmu
  • data/Map0046.lmu
  • data/Map0047.lmu
  • data/Map0048.lmu
  • data/Map0049.lmu
  • data/Map0050.lmu
  • data/Map0051.lmu
  • data/Map0052.lmu
  • data/Map0053.lmu
  • data/Map0054.lmu
  • data/Music/Jend1.mid
  • data/Music/Jsu1.mid
  • data/Music/battle1.mid
  • data/Music/boat1.mid
  • data/Music/boat2.mid
  • data/Music/death_Law.mp3
  • data/Music/gameover1.mid
  • data/Music/hai.mp3
  • data/Music/holiday.mp3
  • data/Music/makeamoment.mp3
  • data/Music/take1.mid
  • data/Music/yami.mp3
  • data/Picture/blood1.xyz
  • data/Picture/blood2.xyz
  • data/Picture/blood3.xyz
  • data/Picture/fire.xyz
  • data/Picture/lyice.xyz
  • data/Picture/poker.xyz
  • data/Picture/s1.xyz
  • data/Picture/s2.xyz
  • data/Picture/s3.xyz
  • data/Picture/s4.xyz
  • data/Picture/s5.xyz
  • data/Picture/s6.xyz
  • data/Picture/s7.xyz
  • data/Picture/select.xyz
  • data/Picture/staffroll.xyz
  • data/Picture/staffroll2.xyz
  • data/RPG_RT.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • data/RPG_RT.ini
  • data/RPG_RT.ldb
  • data/RPG_RT.lmt
  • data/Sound/attack1.wav
  • data/Sound/battle1.wav
  • data/Sound/beat1.wav
  • data/Sound/beat2.wav
  • data/Sound/beat3.wav
  • data/Sound/beat4.wav
  • data/Sound/beat5.wav
  • data/Sound/bite.wav
  • data/Sound/call00.wav
  • data/Sound/call01.wav
  • data/Sound/chime00.wav
  • data/Sound/clock.wav
  • data/Sound/close1.wav
  • data/Sound/damage1.wav
  • data/Sound/damage2.wav
  • data/Sound/enter1.wav
  • data/Sound/escape.wav
  • data/Sound/gashan.wav
  • data/Sound/gun26.wav
  • data/Sound/item1.wav
  • data/Sound/jamp1.wav
  • data/Sound/kan10.wav
  • data/Sound/kan8.wav
  • data/Sound/kan9.wav
  • data/Sound/key.wav
  • data/Sound/kill1.wav
  • data/Sound/knock.wav
  • data/Sound/miss1.wav
  • data/Sound/move.wav
  • data/Sound/open1.wav
  • data/Sound/select1.wav
  • data/Sound/short2.wav
  • data/Sound/thunder1.wav
  • data/Sound/thunder9.wav
  • data/Sound/voice012.wav
  • data/Sound/voice025_r.wav
  • data/Sound/voice031.wav
  • data/Sound/wall1.wav
  • data/Sound/wall2.wav
  • data/Sound/wind7.wav
  • data/System/bearsys.xyz
  • data/Title/killer-bear.xyz
  • dir.ini
  • game.ico
  • killer bear.exe
    .exe windows:4 windows x86 arch:x86

    e6c4f6edd8745f5cc2ce37ffbed151d3


    Headers

    Imports

    Sections

  • loading.gif
    .gif
  • loadingww.gif
    .gif
  • readme.txt
  • uninst.exe.nsis
  • ɱ İ.exe
    .exe windows:4 windows x86 arch:x86

    677985dd414b6f56ecd6b5b040c4588e


    Headers

    Imports

    Sections

  • hf.txt
  • Ϸ˵.txt