General

  • Target

    a15f498f11fd2a1c2d157a5c3a7e2353_JaffaCakes118

  • Size

    10.9MB

  • MD5

    a15f498f11fd2a1c2d157a5c3a7e2353

  • SHA1

    1b2538119de08f134cd328a1409d36986269da79

  • SHA256

    52fe23c277e28799c50afb344f5bd09b79ef6734bd485be208d191c27dc5fffa

  • SHA512

    dbd754b2132597ff8a102040860564f195a0932a20fb10f3ca290c7dce381139b6ecd745f4eb3270970e0ae227591ce8a776e14699d07560f7f7cd4033b8f71f

  • SSDEEP

    196608:MAyp7P/yr2wN3bC/XKGc1Hp5r9LtJ8EW5imOwrLE0WeYd4CpOg4ycPIb7:4r/u2wA/XKbRLH8RimoEg4ycQX

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • a15f498f11fd2a1c2d157a5c3a7e2353_JaffaCakes118
    .zip
  • ?????????2????1.0.01/????.txt
  • ?????????2????1.0.01/????????2???1.0.01b.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $EXEDIR/3DMGAME.ini
  • $EXEDIR/Cfg/Skills/vh2/hero/Files.N2PK
  • $EXEDIR/Strings/Espanol/Files.N2PK
  • $EXEDIR/Strings/French/Files.N2PK
  • $EXEDIR/Strings/German/Files.N2PK
  • $EXEDIR/Strings/Italian/Files.N2PK
  • $EXEDIR/Strings/Polish/Files.N2PK
  • $EXEDIR/Strings/Portugese/Files.N2PK
  • $EXEDIR/VanHelsing_x64.exe
    .exe windows:5 windows x64 arch:x64

    b3aa33e85fd2abd7a77519beb0995fa0


    Headers

    Imports

    Exports

    Sections

  • $EXEDIR/VanHelsing_x86.exe
    .exe windows:5 windows x86 arch:x86

    fdd700738f9dd82150ae2c5158d8c31f


    Headers

    Imports

    Exports

    Sections

  • $EXEDIR/Videos/HU/after_prologue.srt
  • $EXEDIR/Videos/HU/before_prologue.srt
  • $EXEDIR/Videos/HU/outro.srt
  • $EXEDIR/steam_api.dll
    .dll windows:5 windows x86 arch:x86

    d3882d6b5804389d8214e7c85fc87218


    Headers

    Imports

    Exports

    Sections

  • $EXEDIR/steam_api64.dll
    .dll windows:5 windows x64 arch:x64

    5be689736297e79fd47bc80b3b48e958


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Splash_start.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections