General

  • Target

    7de8831d620f6b80021a001b0816bbbc_JaffaCakes118

  • Size

    11.1MB

  • MD5

    7de8831d620f6b80021a001b0816bbbc

  • SHA1

    52735138e212359dafe65cd538ead3921b37b4d9

  • SHA256

    e66d33caff1a5048e4a5b05e52de6b92957aadd9663265afe495965f9769a725

  • SHA512

    46b33f7ee5719f33dccb20f8c9db3a925d80ba9938055f645572bfda3f1daefc20fa40e670b03977474d05b2083f7f6f51e583a44bdcc1916cc8bf18437cfa2d

  • SSDEEP

    196608:zYJ8eMIoGOcwQdMqIW/El74uam3dENLeOvFpfz+JwfOmqtEPWfS0eH6S7c:zYJXM0OcwcDS749xLJfrOYfaac

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 7de8831d620f6b80021a001b0816bbbc_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/Database/conf.db
  • $_2_/DuiLib.dll
    .dll windows:5 windows x86 arch:x86

    6f60bf909bf06d2df93982bc69e3e847


    Headers

    Imports

    Exports

    Sections

  • $_2_/QQPCGameDL.exe
    .exe windows:5 windows x86 arch:x86

    30825ccc508d5000dbfd18d703a5464f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/SSOCommon.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    d26cfb03003607582cf88f555b3eeae3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/SSOLUIControl.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    102da556961e51c8ca543662a644c09c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/SSOPlatform.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    1f8befbdc0b78a34f8db992a8a2d2d9b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/TNProxy.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5b6be223aae9558de13dd3a8d5d553f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/TSSafeEdit.DAT
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $_2_/TSSafeEdit.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $_2_/TenioDL.dll
    .dll windows:5 windows x86 arch:x86

    c26a58df2f672319927e46f96093d885


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/TenioDL.exe
    .exe windows:5 windows x86 arch:x86

    3449a0d1ad1c4f596547289e9163bcc7


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/TenioDL_core.dll
    .dll windows:5 windows x86 arch:x86

    13e58d396d6005160787a8ce524162bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/curllib.dll
    .dll windows:4 windows x86 arch:x86

    e7e76bacda92f81d0eefd0a58978a370


    Headers

    Imports

    Exports

    Sections

  • $_2_/libcurl.dll
    .dll windows:5 windows x86 arch:x86

    588afaf3446fd847b151a8c2f5f81e0d


    Headers

    Imports

    Exports

    Sections

  • $_2_/libeay32.dll
    .dll windows:5 windows x86 arch:x86

    308b55923b8ee86bd0a3eb5cd2794173


    Headers

    Imports

    Exports

    Sections

  • $_2_/license/directui license.txt
  • $_2_/license/duilib license.txt
  • $_2_/license/game_license.txt
  • $_2_/mfc120u.dll
    .dll windows:6 windows x86 arch:x86

    bf9bb776792ebfae57684ede20e9eee4


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/p2papp.dll
    .dll windows:5 windows x86 arch:x86

    8348f9b2263215b556a9cfa8110d64e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/skin/GDLRes_COMMON.zip
    .zip
  • agreement/agreement.xml
    .xml
  • agreement/banner.png
    .png
  • agreement/bg.png
    .png
  • agreement/bg_title.png
    .png
  • agreement/cancel_hover.png
    .png
  • agreement/cancel_normal.png
    .png
  • agreement/checkbox_normal.png
    .png
  • agreement/checkbox_selected_normal.png
    .png
  • agreement/close_normal.png
    .png
  • agreement/confirm_hover.png
    .png
  • agreement/confirm_normal.png
    .png
  • agreement/files.png
    .png
  • agreement/selpath_normal.png
    .png
  • agreement/vscroll_bg.png
    .png
  • agreement/vscroll_down.png
    .png
  • agreement/vscroll_thumb.png
    .png
  • agreement/vscroll_up.png
    .png
  • basewnd/basewnd.xml
  • common/Diamond/annual/annual.png
    .png
  • common/Diamond/annual/no-annual.png
    .png
  • common/Diamond/luxury/lv0.png
    .png
  • common/Diamond/luxury/lv1.png
    .png
  • common/Diamond/luxury/lv2.png
    .png
  • common/Diamond/luxury/lv3.png
    .png
  • common/Diamond/luxury/lv4.png
    .png
  • common/Diamond/luxury/lv5.png
    .png
  • common/Diamond/luxury/lv6.png
    .png
  • common/Diamond/luxury/lv7.png
    .png
  • common/Diamond/luxury/lv8.png
    .png
  • common/Diamond/luxury/lv9.png
    .png
  • common/Diamond/non/lv0.png
    .png
  • common/Diamond/non/lv1.png
    .png
  • common/Diamond/non/lv2.png
    .png
  • common/Diamond/non/lv3.png
    .png
  • common/Diamond/non/lv4.png
    .png
  • common/Diamond/non/lv5.png
    .png
  • common/Diamond/non/lv6.png
    .png
  • common/Diamond/non/lv7.png
    .png
  • common/Diamond/non/lv8.png
    .png
  • common/Diamond/normal/lv0.png
    .png
  • common/Diamond/normal/lv1.png
    .png
  • common/Diamond/normal/lv2.png
    .png
  • common/Diamond/normal/lv3.png
    .png
  • common/Diamond/normal/lv4.png
    .png
  • common/Diamond/normal/lv5.png
    .png
  • common/Diamond/normal/lv6.png
    .png
  • common/Diamond/normal/lv7.png
    .png
  • common/Diamond/normal/lv8.png
    .png
  • common/NZ.png
    .png
  • common/Vip/no_vip.png
    .png
  • common/Vip/vip.png
    .png
  • common/bg.png
    .png
  • downloadwnd/downloadwnd.xml
  • exit/bg.png
    .png
  • exit/bg2.png
    .png
  • exit/bg_stext.png
    .png
  • exit/cancel_hover.png
    .png
  • exit/cancel_normal.png
    .png
  • exit/cancel_push.png
    .png
  • exit/checkbox_normal.png
    .png
  • exit/checkbox_select_normal.png
    .png
  • exit/close_hover.png
    .png
  • exit/close_normal.png
    .png
  • exit/close_push.png
    .png
  • exit/confirm_disable.png
    .png
  • exit/confirm_hover.png
    .png
  • exit/confirm_normal.png
    .png
  • exit/confirm_push.png
    .png
  • exit/exit.xml
    .xml
  • exit/radio_normal.png
    .png
  • exit/radio_select_normal.png
    .png
  • lanzuan/bg.png
    .png
  • lanzuan/close.png
    .png
  • lanzuan/lanzuan.png
    .png
  • lanzuan/lanzuanwnd.xml
    .xml
  • login/bg.png
    .png
  • login/checkbox_disabled.png
    .png
  • login/checkbox_hover.png
    .png
  • login/checkbox_normal.png
    .png
  • login/checkbox_pushed.png
    .png
  • login/checkbox_selected_disable.png
    .png
  • login/checkbox_selected_down.png
    .png
  • login/checkbox_selected_hover.png
    .png
  • login/checkbox_selected_normal.png
    .png
  • login/close_disable.png
    .png
  • login/close_hover.png
    .png
  • login/close_normal.png
    .png
  • login/close_push.png
    .png
  • login/downlist_bk.png
    .png
  • login/login.xml
    .xml
  • login/logon_disable.png
    .png
  • login/logon_hover.png
    .png
  • login/logon_normal.png
    .png
  • login/logon_push.png
    .png
  • login/selacc_disable.png
    .png
  • login/selacc_hover.png
    .png
  • login/selacc_normal.png
    .png
  • login/selacc_push.png
    .png
  • mainframe/Rotation_active.png
    .png
  • mainframe/Rotation_inactive.png
    .png
  • mainframe/app_icon.png
    .png
  • mainframe/banner.png
    .png
  • mainframe/bg_bulletin.png
    .png
  • mainframe/bg_businese.png
    .png
  • mainframe/bg_gift.png
    .png
  • mainframe/bg_giftarea.png
    .png
  • mainframe/bg_giftstatus.png
    .png
  • mainframe/bg_operation.png
    .png
  • mainframe/bg_progress.png
    .png
  • mainframe/bg_view.png
    .png
  • mainframe/bg_welcome.png
    .png
  • mainframe/blind.png
    .png
  • mainframe/blink.png
    .png
  • mainframe/change_disable.png
    .png
  • mainframe/change_hover.png
    .png
  • mainframe/change_normal.png
    .png
  • mainframe/change_push.png
    .png
  • mainframe/checkbox_normal.png
    .png
  • mainframe/checkbox_selected_normal.png
    .png
  • mainframe/close_disable.png
    .png
  • mainframe/close_hover.png
    .png
  • mainframe/close_normal.png
    .png
  • mainframe/close_push.png
    .png
  • mainframe/continue_disable.png
    .png
  • mainframe/continue_hover.png
    .png
  • mainframe/continue_normal.png
    .png
  • mainframe/continue_push.png
    .png
  • mainframe/download-push.png
    .png
  • mainframe/download_disable.png
    .png
  • mainframe/download_hover.png
    .png
  • mainframe/download_normal.png
    .png
  • mainframe/files.png
    .png
  • mainframe/gift_disable.png
    .png
  • mainframe/gift_hover.png
    .png
  • mainframe/gift_normal.png
    .png
  • mainframe/gift_push.png
    .png
  • mainframe/mainfrm.xml
    .xml
  • mainframe/min_disable.png
    .png
  • mainframe/min_hover.png
    .png
  • mainframe/min_normal.png
    .png
  • mainframe/min_push.png
    .png
  • mainframe/notreach.png
    .png
  • mainframe/pause_disable.png
    .png
  • mainframe/pause_hover.png
    .png
  • mainframe/pause_normal.png
    .png
  • mainframe/pause_push.png
    .png
  • mainframe/progress_normal.png
    .png
  • mainframe/progress_speedup.png
    .png
  • mainframe/receive_disable.png
    .png
  • mainframe/receive_hover.png
    .png
  • mainframe/receive_normal.png
    .png
  • mainframe/receive_push.png
    .png
  • mainframe/role.png
    .png
  • mainframe/secret_gift.png
    .png
  • mainframe/sending.png
    .png
  • mainframe/sent.png
    .png
  • mainframe/setting_disable.png
    .png
  • mainframe/setting_hover.png
    .png
  • mainframe/setting_normal.png
    .png
  • mainframe/setting_push.png
    .png
  • mainframe/setup_disable.png
    .png
  • mainframe/setup_hover.png
    .png
  • mainframe/setup_normal.png
    .png
  • mainframe/setup_push.png
    .png
  • mainframe/speaker.png
    .png
  • mainframe/speed_backup.png
    .png
  • mainframe/speed_cdn.png
    .png
  • mainframe/speed_ebit.png
    .png
  • mainframe/speed_limit.png
    .png
  • mainframe/speed_normal.png
    .png
  • mainframe/speed_vip_cdn.png
    .png
  • mainframe/speed_vip_ebit.png
    .png
  • mainframe/webkitwnd.xml
    .xml
  • notifymenu/menu_separate.png
    .png
  • notifymenu/notifymenu.xml
  • others/Combo_nor.bmp
  • others/Combo_over.bmp
  • others/bg.png
    .png
  • others/cancel_disable.png
    .png
  • others/cancel_hover.png
    .png
  • others/cancel_normal.png
    .png
  • others/cancel_push.png
    .png
  • others/close_hover.png
    .png
  • others/close_normal.png
    .png
  • others/close_push.png
    .png
  • others/confirm_disable.png
    .png
  • others/confirm_hover.png
    .png
  • others/confirm_normal.png
    .png
  • others/confirm_push.png
    .png
  • others/err_pic.png
    .png
  • others/gamearea.xml
    .xml
  • others/know_disable.png
    .png
  • others/know_hover.png
    .png
  • others/know_normal.png
    .png
  • others/know_push.png
    .png
  • setting/Combo_nor.bmp
  • setting/Combo_over.bmp
  • setting/bg.png
    .png
  • setting/bg_ltext.png
    .png
  • setting/bg_stext.png
    .png
  • setting/cancel_hover.png
    .png
  • setting/cancel_normal.png
    .png
  • setting/cancel_push.png
    .png
  • setting/checkbox_normal.png
    .png
  • setting/checkbox_selected_normal.png
    .png
  • setting/close_hover.png
    .png
  • setting/close_normal.png
    .png
  • setting/close_push.png
    .png
  • setting/confirm_disable.png
    .png
  • setting/confirm_hover.png
    .png
  • setting/confirm_normal.png
    .png
  • setting/confirm_push.png
    .png
  • setting/down_hover.png
    .png
  • setting/down_normal.png
    .png
  • setting/setting.xml
    .xml
  • setting/up_hover.png
    .png
  • setting/up_normal.png
    .png
  • verifycode/VerifyCode.xml
    .xml
  • verifycode/bkg.png
    .png
  • verifycode/cancel.png
    .png
  • verifycode/close_disable.png
    .png
  • verifycode/close_hover.png
    .png
  • verifycode/close_normal.png
    .png
  • verifycode/close_push.png
    .png
  • verifycode/confirm.png
    .png
  • verifycode/input_bkg.png
    .png
  • verifycode/min_disable.png
    .png
  • verifycode/min_hover.png
    .png
  • verifycode/min_normal.png
    .png
  • verifycode/min_push.png
    .png
  • verifycode/split.png
    .png
  • verifycode/warning.png
    .png
  • $_2_/skin/common/Common_big.ico
  • $_2_/skin/common/Common_small.ico
  • $_2_/sqlite3.dll
    .dll windows:5 windows x86 arch:x86

    fe7c853638edb85de0210927c503c14e


    Headers

    Imports

    Exports

    Sections

  • $_2_/ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    9d94280f9d9c142f4d573f47d616a114


    Headers

    Imports

    Exports

    Sections

  • $_2_/vccorlib120.dll
    .dll windows:6 windows x86 arch:x86

    9fc5caa45dc840cfefd11b8e12af14d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/wke.dll
    .dll windows:5 windows x86 arch:x86

    3c53a068e7d0d3fbb24ce617e12027a5


    Headers

    Imports

    Exports

    Sections