General

  • Target

    8fb30480f2b4bffe1918f69b5eb189e5_JaffaCakes118

  • Size

    18.5MB

  • MD5

    8fb30480f2b4bffe1918f69b5eb189e5

  • SHA1

    55de62f32fcdec3c858a3385e97e874ae1a9d927

  • SHA256

    4801e317e9e4652f29889b8cb41a24be0a60388852df11f7b0a9f0a79b8bbff2

  • SHA512

    b25155f8cf8254bac0a422ad83695dbfed671b336d1c370d99c9df4061d8c149c9b438b7f5aa3f30a535c79151712ed127e6b22e32eb099ab081bd3f2a4ab9b7

  • SSDEEP

    393216:oIfeLK8vbGyLjT30GajnnVQmatbXzNg/j7qNJPiitOqMhi07p0Go7:t2KaGyLjQjVQBbijAJPiitOPi80Go7

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • 8fb30480f2b4bffe1918f69b5eb189e5_JaffaCakes118
    .zip
  • 东坡软件下载.url
  • 东坡软件下载说明.txt
  • 刹天比赛服最新多功能辅助V1.3.exe
    .exe windows:5 windows x86 arch:x86

    77164d868446a210509e5396a715b7e3


    Headers

    Imports

    Sections

  • 白名单破解工具.exe
    .exe windows:4 windows x86 arch:x86

    fe4191593b7f778551fd019ae9c2e741


    Headers

    Imports

    Sections

  • 破解蓝钻下载器限速,达到无需蓝钻使用无限加速.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • 穿越火线比赛服下载器.exe
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/Extract.dll
    .dll windows:4 windows x86 arch:x86

    102033a12b8cf17a451a9e9760020138


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/Microsoft.VC90.ATL.manifest
  • $_2_/Microsoft.VC90.CRT.manifest
  • $_2_/MiniQQDL.exe
    .exe windows:4 windows x86 arch:x86

    e24787ef742965f98f5b966f6a0f8025


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/PayPlatform.exe
    .exe windows:4 windows x86 arch:x86

    9b0062e4f6831268757558b80d5e4efa


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/SSOCommon.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    10a44f4ccbe1052177c8f4aa4c77e081


    Headers

    Imports

    Exports

    Sections

  • $_2_/SSOLUIControl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7b72b308cecb50c7252934bd54b1513a


    Headers

    Imports

    Exports

    Sections

  • $_2_/SSOPlatform.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f3ad42b23a5744ca18c481ea97869a09


    Headers

    Imports

    Exports

    Sections

  • $_2_/SkinConfig.ini
  • $_2_/TNProxy.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5b6be223aae9558de13dd3a8d5d553f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/TSSafeEdit.DAT
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $_2_/TenioDL.dll
    .dll windows:5 windows x86 arch:x86

    c26a58df2f672319927e46f96093d885


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/TenioDL.exe
    .exe windows:5 windows x86 arch:x86

    3449a0d1ad1c4f596547289e9163bcc7


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/TenioDL_core.dll
    .dll windows:5 windows x86 arch:x86

    13e58d396d6005160787a8ce524162bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/VerConfig.ini
  • $_2_/atl90.dll
    .dll windows:5 windows x86 arch:x86

    17ed9dd04d0bbfc19b81bf75e8ebe774


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/config.ini
  • $_2_/curllib.dll
    .dll windows:4 windows x86 arch:x86

    e7e76bacda92f81d0eefd0a58978a370


    Headers

    Imports

    Exports

    Sections

  • $_2_/image/diamond/1/Big.png
    .png
  • $_2_/image/diamond/1/lv1.png
    .png
  • $_2_/image/diamond/1/lv2.png
    .png
  • $_2_/image/diamond/1/lv3.png
    .png
  • $_2_/image/diamond/1/lv4.png
    .png
  • $_2_/image/diamond/1/lv5.png
    .png
  • $_2_/image/diamond/1/lv6.png
    .png
  • $_2_/image/diamond/1/lv7.png
    .png
  • $_2_/image/diamond/2/Big.png
    .png
  • $_2_/image/diamond/2/lv1.png
    .png
  • $_2_/image/diamond/2/lv2.png
    .png
  • $_2_/image/diamond/2/lv3.png
    .png
  • $_2_/image/diamond/2/lv4.png
    .png
  • $_2_/image/diamond/2/lv5.png
    .png
  • $_2_/image/diamond/2/lv6.png
    .png
  • $_2_/image/diamond/2/lv7.png
    .png
  • $_2_/image/figure/ListBox/ListBoxBk1.png
    .png
  • $_2_/image/figure/ListBox/ListBoxBk2.png
    .png
  • $_2_/image/figure/ListBox/ListBoxDown.png
    .png
  • $_2_/image/figure/ListBox/ListBoxUp.png
    .png
  • $_2_/image/figure/ListBox/ScrollBarB.png
    .png
  • $_2_/image/figure/ListBox/ScrollBarF.png
    .png
  • $_2_/image/figure/Logo/logo.ico
  • $_2_/image/figure/Main/InfoBkg.png
    .png
  • $_2_/image/figure/Main/LoginButton.png
    .png
  • $_2_/image/figure/Main/SpeededButton.png
    .png
  • $_2_/image/figure/Main/Tips_bkg.png
    .png
  • $_2_/image/figure/Main/checked.png
    .png
  • $_2_/image/figure/Main/close.png
    .png
  • $_2_/image/figure/Main/filepath.png
    .png
  • $_2_/image/figure/Main/loading1.png
    .png
  • $_2_/image/figure/Main/loading2.png
    .png
  • $_2_/image/figure/Main/loadingBkg.png
    .png
  • $_2_/image/figure/Main/mainbnd.png
    .png
  • $_2_/image/figure/Main/mainwnd.png
    .png
  • $_2_/image/figure/Main/min.png
    .png
  • $_2_/image/figure/Main/novip.png
    .png
  • $_2_/image/figure/Main/pausedownload.png
    .png
  • $_2_/image/figure/Main/setting.png
    .png
  • $_2_/image/figure/Main/startbutton.png
    .png
  • $_2_/image/figure/Main/startdownload.png
    .png
  • $_2_/image/figure/Main/unchecked.png
    .png
  • $_2_/image/figure/Main/upstatusBkg.png
    .png
  • $_2_/image/figure/Main/versionBkg.png
    .png
  • $_2_/image/figure/dialog/Dialog_Checkbox_Check.png
    .png
  • $_2_/image/figure/dialog/Dialog_Checkbox_Uncheck.png
    .png
  • $_2_/image/figure/dialog/Dialog_Close.png
    .png
  • $_2_/image/figure/dialog/Dialog_NormalBtn.png
    .png
  • $_2_/image/figure/dialog/Dialog_seperator.png
    .png
  • $_2_/image/figure/dialog/ListBoxOneImageBkg.png
    .png
  • $_2_/image/figure/dialog/Login_FastLoginListBkg.png
    .png
  • $_2_/image/figure/dialog/Login_FastLoginListSel.png
    .png
  • $_2_/image/figure/dialog/dlg_bkg_bluediamond.png
    .png
  • $_2_/image/figure/dialog/dlg_bkg_bluehaohuadiamond.png
    .png
  • $_2_/image/figure/dialog/openbluediamond.png
    .png
  • $_2_/image/figure/dialog/openbluehaohuadiamond.png
    .png
  • $_2_/image/figure/dialog/updatebluediamond.png
    .png
  • $_2_/image/figure/dialog/updatebluehaohuadiamond.png
    .png
  • $_2_/image/jiasu/0.png
    .png
  • $_2_/image/jiasu/1.png
    .png
  • $_2_/image/jiasu/2.png
    .png
  • $_2_/image/jiasu/3.png
    .png
  • $_2_/image/jiasu/4.png
    .png
  • $_2_/image/jiasu/5.png
    .png
  • $_2_/image/jiasu/6.png
    .png
  • $_2_/image/jiasu/7.png
    .png
  • $_2_/image/jiasu/8.png
    .png
  • $_2_/image/jiasu/9.png
    .png
  • $_2_/image/jiasu/dot.png
    .png
  • $_2_/image/speed/0.png
    .png
  • $_2_/image/speed/1.png
    .png
  • $_2_/image/speed/2.png
    .png
  • $_2_/image/speed/3.png
    .png
  • $_2_/image/speed/4.png
    .png
  • $_2_/image/speed/5.png
    .png
  • $_2_/image/speed/6.png
    .png
  • $_2_/image/speed/7.png
    .png
  • $_2_/image/speed/8.png
    .png
  • $_2_/image/speed/9.png
    .png
  • $_2_/image/speed/dot.png
    .png
  • $_2_/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    2dec2d42421b088bfcddeba53b046464


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0453db624ecaef7c4f3da938cd1d0fc5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/p2papp.dll
    .dll windows:5 windows x86 arch:x86

    aac0a9793146b463ae44c8f6ca82de51


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 解释.txt