General

  • Target

    94e481ba037ba0c1d31b8665236568c1_JaffaCakes118

  • Size

    8.1MB

  • MD5

    94e481ba037ba0c1d31b8665236568c1

  • SHA1

    c83ac6790d75337595231f07cfd9e1c1d9b89c29

  • SHA256

    b18f2b6828854680f1a40a30cdaa8ccfebb31dc2c11b8fcb62a9ede911b2ee70

  • SHA512

    ec61d697e5e8bb5fd5c718e5d9fb2d674f686cce84e1af104cca5eda4a4a47fbaf31ef11b079cfefee103ef1745dcdc340f9d292eb7933aa268b2a38b4ae94b4

  • SSDEEP

    196608:jeB4Smyf2OYWw843IwSfjc41EhZVohbyjoK5QLXYOHVDmu:yzm62Yw84OLDIVAcCLo0VDmu

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 94e481ba037ba0c1d31b8665236568c1_JaffaCakes118
    .rar
  • sscqfzgj/PBACC115.DLL
    .dll windows:4 windows x86 arch:x86

    48769b3ac8557223e4933e5d91c5c711


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/PBDWE115.DLL
    .dll windows:4 windows x86 arch:x86

    f0b61dcedaa75e2e0a2c6342938119b6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/PBJAG115.DLL
    .dll windows:4 windows x86 arch:x86

    d2076754f678914334ffb1d1b17aebe0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/PBODB115.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    82caaf574774cf543628dad1b4605bb5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/PBOLE115.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    823decb9392476f0db5190599a50174e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/PBSHR115.DLL
    .dll windows:4 windows x86 arch:x86

    a7eb34dd359f2118f2a3b40faf1a56ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/PBVM115.DLL
    .dll windows:4 windows x86 arch:x86

    81409f05df0d6641ec892d9bd063c125


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/PBjvm115.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    e1bf4787dd9dabe248201a2537c80792


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/SockDll.dll
    .dll windows:5 windows x86 arch:x86

    535a8cbefa6fc5a85ec50f65db4447b6


    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/config.ini
  • sscqfzgj/default.htm
    .html
  • sscqfzgj/des64.dll
    .dll windows:4 windows x86 arch:x86

    cd76978f53dd605c300155ebad3ae998


    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/dm.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • sscqfzgj/libjcc.dll
    .dll windows:4 windows x86 arch:x86

    1b0a346547e8b86414e28a4684240aa7


    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/libjutils.dll
    .dll windows:4 windows x86 arch:x86

    33ee2cba20d82f3820335a0a2b65bb83


    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/msvcp100d.dll
    .dll windows:5 windows x86 arch:x86

    de45b5420a7ba57a2e1bf47cdd944d8b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/msvcr100d.dll
    .dll windows:5 windows x86 arch:x86

    0dc7b0e0b0a7b26ca080f7c56e8c0b34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/pbcom115.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d2189c5717c13370514736e4824cff85


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/pbdpl115.DLL
    .dll windows:4 windows x86 arch:x86

    daebdb43eef6bb1de7740ebaefecc2d9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/pbdwp115.DLL
    .dll windows:4 windows x86 arch:x86

    215ef7199a1435d7bf1a83e7aa8f5262


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/pbscr115.dll
    .dll windows:4 windows x86 arch:x86

    566d67bfde70021fab6d6151d628d13d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/pbtra115.dll
    .dll windows:4 windows x86 arch:x86

    6f7b9ec3b7027f192951fcd131a2a12b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/pbvm90.dll
    .dll windows:4 windows x86 arch:x86

    8151dad9a854bb54a5a9bfeb10bc7bd2


    Headers

    Imports

    Exports

    Sections

  • sscqfzgj/plugin/33.bmp
  • sscqfzgj/plugin/SysTray.ico
  • sscqfzgj/plugin/Thumbs.db
  • sscqfzgj/plugin/baoming.bmp
  • sscqfzgj/plugin/baoming1.bmp
  • sscqfzgj/plugin/boss.bmp
  • sscqfzgj/plugin/bqjn.bmp
  • sscqfzgj/plugin/bqjn1.bmp
  • sscqfzgj/plugin/choujiang.bmp
  • sscqfzgj/plugin/dm_soft.txt
  • sscqfzgj/plugin/dm_soft2.txt
  • sscqfzgj/plugin/duobao.bmp
  • sscqfzgj/plugin/duobao1.bmp
  • sscqfzgj/plugin/duobao2.bmp
  • sscqfzgj/plugin/guaji.bmp
  • sscqfzgj/plugin/hbc.bmp
  • sscqfzgj/plugin/index.html
    .html
  • sscqfzgj/plugin/jrjgc.bmp
  • sscqfzgj/plugin/kmousetool.ico
  • sscqfzgj/plugin/kscj.bmp
  • sscqfzgj/plugin/kscj1.bmp
  • sscqfzgj/plugin/lcf.bmp
  • sscqfzgj/plugin/ljbm.bmp
  • sscqfzgj/plugin/mflq.bmp
  • sscqfzgj/plugin/mflq1.bmp
  • sscqfzgj/plugin/mflq2.bmp
  • sscqfzgj/plugin/mflq3.bmp
  • sscqfzgj/plugin/mo.bmp
  • sscqfzgj/plugin/mo1.bmp
  • sscqfzgj/plugin/mo2.bmp
  • sscqfzgj/plugin/mo3.bmp
  • sscqfzgj/plugin/mojia.bmp
  • sscqfzgj/plugin/mori.bmp
  • sscqfzgj/plugin/mozd.bmp
  • sscqfzgj/plugin/mrjs.bmp
  • sscqfzgj/plugin/mrzztc.bmp
  • sscqfzgj/plugin/mrzztc1.bmp
  • sscqfzgj/plugin/njmy.bmp
  • sscqfzgj/plugin/nqjn.bmp
  • sscqfzgj/plugin/nqjn1.bmp
  • sscqfzgj/plugin/nqjn2.bmp
  • sscqfzgj/plugin/nqjn3.bmp
  • sscqfzgj/plugin/nqjn4.bmp
  • sscqfzgj/plugin/num.txt
  • sscqfzgj/plugin/pai.bmp
  • sscqfzgj/plugin/pai1.bmp
  • sscqfzgj/plugin/pbvm
    .html .js polyglot
  • sscqfzgj/plugin/shutdown.bat
  • sscqfzgj/plugin/tc.bmp
  • sscqfzgj/plugin/tc1.bmp
  • sscqfzgj/plugin/tcmscg.bmp
  • sscqfzgj/plugin/tgzd.bmp
  • sscqfzgj/plugin/tuichu.bmp
  • sscqfzgj/plugin/tuichu1.bmp
  • sscqfzgj/plugin/tz.bmp
  • sscqfzgj/plugin/tz1.bmp
  • sscqfzgj/plugin/win_shuzi.txt
  • sscqfzgj/plugin/win_soft.txt
  • sscqfzgj/plugin/win_x.txt
  • sscqfzgj/plugin/x1.bmp
  • sscqfzgj/plugin/x2.bmp
  • sscqfzgj/plugin/x3.bmp
  • sscqfzgj/plugin/xun.bmp
  • sscqfzgj/plugin/xun1.bmp
  • sscqfzgj/plugin/xunmo.bmp
  • sscqfzgj/plugin/xunmo1.bmp
  • sscqfzgj/plugin/yed.bmp
  • sscqfzgj/plugin/zt.bmp
  • sscqfzgj/plugin/zyg.bmp
  • sscqfzgj/plugin/中级打孔石.bmp
  • sscqfzgj/plugin/五行真金.bmp
  • sscqfzgj/plugin/五行精金.bmp
  • sscqfzgj/plugin/亮叉号.bmp
  • sscqfzgj/plugin/元宝.bmp
  • sscqfzgj/plugin/出售箭头.bmp
  • sscqfzgj/plugin/初级道法金丹.bmp
  • sscqfzgj/plugin/副本完成.bmp
  • sscqfzgj/plugin/半叉.bmp
  • sscqfzgj/plugin/叉号.bmp
  • sscqfzgj/plugin/叉号2.bmp
  • sscqfzgj/plugin/叉号3.bmp
  • sscqfzgj/plugin/叉号4.bmp
  • sscqfzgj/plugin/噩梦.bmp
  • sscqfzgj/plugin/困难.bmp
  • sscqfzgj/plugin/地狱.bmp
  • sscqfzgj/plugin/太乙真金.bmp
  • sscqfzgj/plugin/太乙精金.bmp
  • sscqfzgj/plugin/失败.bmp
  • sscqfzgj/plugin/宝箱.bmp
  • sscqfzgj/plugin/对话.bmp
  • sscqfzgj/plugin/封神.bmp
  • sscqfzgj/plugin/封神1.bmp
  • sscqfzgj/plugin/小秘书.bmp
  • sscqfzgj/plugin/小秘书1.bmp
  • sscqfzgj/plugin/小秘书2.bmp
  • sscqfzgj/plugin/已封神.bmp
  • sscqfzgj/plugin/建号.bmp
  • sscqfzgj/plugin/建号1.bmp
  • sscqfzgj/plugin/挑战.bmp
  • sscqfzgj/plugin/斗剑场.bmp
  • sscqfzgj/plugin/日常.bmp
  • sscqfzgj/plugin/普.bmp
  • sscqfzgj/plugin/普通.bmp
  • sscqfzgj/plugin/未挑战.bmp
  • sscqfzgj/plugin/洗练符.bmp
  • sscqfzgj/plugin/炼狱.bmp
  • sscqfzgj/plugin/确定.bmp
  • sscqfzgj/plugin/确定1.bmp
  • sscqfzgj/plugin/礼券10.bmp
  • sscqfzgj/plugin/礼券5.bmp
  • sscqfzgj/plugin/精致拆卸石.bmp
  • sscqfzgj/plugin/胜.bmp
  • sscqfzgj/plugin/胜1.bmp
  • sscqfzgj/plugin/自动封神.bmp
  • sscqfzgj/plugin/自动封神1.bmp
  • sscqfzgj/plugin/自动挂机.bmp
  • sscqfzgj/plugin/补髓益元丹.bmp
  • sscqfzgj/plugin/阵营.bmp
  • sscqfzgj/plugin/阵营1.bmp
  • sscqfzgj/plugin/高级挂机加速符.bmp
  • sscqfzgj/reg.bat
  • sscqfzgj/使用说明.txt
  • sscqfzgj/极速蜀山传奇辅助工具V2.38.exe
    .exe windows:4 windows x86 arch:x86

    1a3d8c3f39a0e02fe506a5bee2936643


    Headers

    Imports

    Sections

  • sscqfzgj/绿软基地.url
    .url