General

  • Target

    8f91abc6cc7547e369ffe898edd0c24d_JaffaCakes118

  • Size

    2.8MB

  • MD5

    8f91abc6cc7547e369ffe898edd0c24d

  • SHA1

    fe5e4e1da66d06eca8a5fedbebdeeab3851b5fdb

  • SHA256

    ae6ef57fe5fb45c2b7fd541240e90dc8957786c18f1394d68fe7eb6736db24ba

  • SHA512

    0980f40f6af0ee2148949defacf837bf8b7a56ab099bb14cf688a63775ba140184946f31d47472573e8c866b6e920ca0f1dd63a69ccb501aae9e85754ccfdc32

  • SSDEEP

    49152:PUBpdHIv8RkiJpxcJtXBB5Xwg+9gM48atb+lGkQRy2fnQMCVAF8ohxTfcmBzZ:UpdXKiJHGZb+2c1kRhnQMCuF8MxQmr

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 8f91abc6cc7547e369ffe898edd0c24d_JaffaCakes118
    .rar
  • K1_140317.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • data/6级.bmp
  • data/again.bmp
  • data/chonglian.bmp
  • data/daoshu.bmp
  • data/diaoxian.bmp
  • data/game.cfg
  • data/hongcha.bmp
  • data/hud1280x720.ini
  • data/input.ini
  • data/jifenban.bmp
  • data/jifenban2.bmp
  • data/jinggao.bmp
  • data/jnd.bmp
  • data/jnd2.bmp
  • data/num.txt
  • data/play1.bmp
  • data/qt.bmp
  • data/sele.bmp
  • data/setsoft.ini
  • data/sf.bmp
  • data/shouye.bmp
  • data/sm.bmp
  • data/tp.bmp
  • data/tp2.bmp
  • data/xc.bmp
  • data/z11.bmp
  • data/z22.bmp
  • data/z33.bmp
  • data/z44.bmp
  • data/z55.bmp
  • data/zhaodao.bmp
  • data/关闭.bmp
  • data/关闭荣誉.bmp
  • data/出兵.bmp
  • data/升级.bmp
  • data/右框.bmp
  • data/右阵.bmp
  • data/大区列表.bmp
  • data/大厅取消.bmp
  • data/小兵血.bmp
  • data/左框.bmp
  • data/左阵.bmp
  • data/广告.bmp
  • data/快速登陆1.bmp
  • data/技能1.bmp
  • data/技能2.bmp
  • data/敌人血.bmp
  • data/敌人血0.bmp
  • data/敌小兵.bmp
  • data/服务器提示.bmp
  • data/登录首页.bmp
  • data/确认按钮.bmp
  • data/等待.bmp
  • data/结束1.bmp
  • data/结束2.bmp
  • data/荣誉1.bmp
  • data/返回大厅.bmp
  • data/进入大区.bmp
  • data/进行中.bmp
  • data/锁定标志.bmp
  • data/长期重连.bmp
  • data/队友.bmp
  • plug/EyLogin.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1d666f5b619530d37b3bde9e727fef26


    Headers

    Imports

    Exports

    Sections

  • plug/dm.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 说明.txt