General

  • Target

    a197568b6b6635f9eb7e35a8e565cb24_JaffaCakes118

  • Size

    9.4MB

  • MD5

    a197568b6b6635f9eb7e35a8e565cb24

  • SHA1

    e6f007c9fefade492dc507c86fecc6536cb1b590

  • SHA256

    b30c9d603f9e754d8368e03688676ed8660369d62f69484aa4ccbae298f7ed0e

  • SHA512

    5f0f9e51f489386bd3fd9e8c5bd16e53350af20f8b58365fb7c8da3b6ec169b41651908570e88d8a3e0980628eb873f77e84794652c5b92827639dd47f094ce1

  • SSDEEP

    196608:bbr8zA4dgEFPUCChXniBi6Kji132hPOZs1p90U4nqn0WblAXDclZAq:bczVChXniBfKeep9VPtbaA3

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 3 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 3 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 26 IoCs

    Checks for missing Authenticode signature.

Files

  • a197568b6b6635f9eb7e35a8e565cb24_JaffaCakes118
    .zip
  • 1964/1964.cht
  • 1964/1964.exe
    .exe windows:4 windows x86 arch:x86

    b261fa863edbf7fe118b426d7601d122


    Headers

    Imports

    Sections

  • 1964/1964.ini
  • 1964/BMGlib.dll
    .dll windows:4 windows x86 arch:x86

    843116a531a4315d4b9575ab44496ac0


    Headers

    Imports

    Exports

    Sections

  • 1964/BUNDLE_README.txt
  • 1964/Project64.rdb
  • 1964/dist.txt
  • 1964/glide3x.dll
    .dll windows:4 windows x86 arch:x86

    475fcbd7d9cd4b7c9c0b339c2a007bab


    Headers

    Imports

    Exports

    Sections

  • 1964/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 1964/msvcp60d.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 1964/msvcp70.dll
    .dll windows:4 windows x86 arch:x86

    f44fca890adb92dc001c1fdad5e8a6a6


    Headers

    Imports

    Exports

    Sections

  • 1964/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • 1964/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 1964/msvcr70.dll
    .dll windows:4 windows x86 arch:x86

    6009aad2b998a3b768ed06d2858e9ea9


    Headers

    Imports

    Exports

    Sections

  • 1964/msvcrtd.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 1964/plugin/AziAudio.dll
    .dll windows:5 windows x86 arch:x86

    6404ec8bee013709b80d90ea806387ce


    Headers

    Imports

    Exports

    Sections

  • 1964/plugin/AziAudio0.56WIP2.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 1964/plugin/GLideN64.custom.ini
  • 1964/plugin/GLideN64.dll
    .dll windows:6 windows x86 arch:x86

    4c024b694875e08a2e4c26438f98cbb7


    Headers

    Imports

    Exports

    Sections

  • 1964/plugin/GLideN64.ini
  • 1964/plugin/Glide64.dll
    .dll windows:4 windows x86 arch:x86

    af108b32e0fa476e8f65f8c67413fd95


    Headers

    Imports

    Exports

    Sections

  • 1964/plugin/Glide64.ini
  • 1964/plugin/Glide64_de_DE.mo
  • 1964/plugin/Glide64_fr_FR.mo
  • 1964/plugin/Glide64_ja_JP.mo
  • 1964/plugin/Glide64_ru_RU.mo
  • 1964/plugin/Glide64_zh_CN.mo
  • 1964/plugin/Glide64_zh_TW.mo
  • 1964/plugin/GlideHQ.dll
    .dll windows:4 windows x86 arch:x86

    7c1461d830469f11f55d8f2a87e75f77


    Headers

    Imports

    Exports

    Sections

  • 1964/plugin/Jabo_Direct3D6.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 1964/plugin/Jabo_Direct3D8.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 1964/plugin/Mouse_Injector.dll
    .dll windows:4 windows x86 arch:x86

    75ca977fff879cd00e428827564350d2


    Headers

    Imports

    Exports

    Sections

  • 1964/plugin/NRage.ini
  • 1964/plugin/NRage_Input_V2.dll
    .dll windows:5 windows x86 arch:x86

    c2ae47aecb6b9d3333320607f3082bf0


    Headers

    Imports

    Exports

    Sections

  • 1964/plugin/NRage_Input_V2_beta.dll
    .dll windows:5 windows x86 arch:x86

    12d5a89b4d6948d03002602c889e4f41


    Headers

    Imports

    Exports

    Sections

  • 1964/plugin/No Sound.dll
    .dll windows:4 windows x86 arch:x86

    5ec0c0f82ce996b325edc56517d33144


    Headers

    Imports

    Exports

    Sections

  • 1964/plugin/PD Speedhack for N-Rage.exe
    .exe windows:4 windows x86 arch:x86

    8f54092e4b628c8776ac460bd5fb0759


    Headers

    Imports

    Sections

  • 1964/plugin/RSP.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 1964/plugin/SoftGraphic_1.5.0.dll
    .dll windows:6 windows x86 arch:x86

    4afc2a3201e82b93dea035cf4bc0936a


    Headers

    Imports

    Exports

    Sections

  • 1964/plugin/cache/GOLDENEYE_HIRESTEXTURES.dat
    .gz
  • GOLDENEYE_HIRESTEXTURES.dat
  • 1964/plugin/cache/goldeneye credits.txt
  • 1964/plugin/gliden64_de.qm
  • 1964/plugin/gliden64_es.qm
  • 1964/plugin/gliden64_fr.qm
  • 1964/plugin/gliden64_it.qm
  • 1964/plugin/gliden64_ja.qm
  • 1964/plugin/gliden64_pl.qm
  • 1964/plugin/gliden64_pt_BR.qm
  • 1964/plugin/mouseinjector.ini
  • 1964/readme.txt
  • 1964/save/GOLDENEYE-usa.eep
  • 1964/save/GoldenEye X-usa.eep
  • 1964/save/GoldenEye X-usa.m0
  • 1964/save/Perfect Dark-usa.eep
  • 1964/save/Perfect Dark-usa.m0
  • 1964/source.tar.bz2
    .bz2
  • source.tar
    .tar
  • 1964-2002-0922/1964.sln
  • 1964-2002-0922/1964.suo
  • 1964-2002-0922/1964.vcproj
    .xml
  • 1964-2002-0922/1964ini.c
  • 1964-2002-0922/1964ini.h
  • 1964-2002-0922/COPYRIGHT.txt
  • 1964-2002-0922/DbgPrint.h
  • 1964-2002-0922/DebugR4300i.c
  • 1964-2002-0922/FPU.c
  • 1964-2002-0922/GC.cfg
  • 1964-2002-0922/Globals.h
  • 1964-2002-0922/Kaillera/Kaillera.c
  • 1964-2002-0922/Kaillera/Kaillera.h
  • 1964-2002-0922/R4300i.c
  • 1964-2002-0922/Readme-HOW-TO-COMPILE.txt
  • 1964-2002-0922/Tlb.c
  • 1964-2002-0922/cheatcode.c
  • 1964-2002-0922/cheatcode.h
  • 1964-2002-0922/compiler.c
  • 1964-2002-0922/compiler.h
  • 1964-2002-0922/debug_option.c
  • 1964-2002-0922/debug_option.h
  • 1964-2002-0922/dma.c
  • 1964-2002-0922/dma.h
  • 1964-2002-0922/dynaRec/Analyze.c
  • 1964-2002-0922/dynaRec/OpcodeDebugger.c
  • 1964-2002-0922/dynaRec/dynaBranch.h
  • 1964-2002-0922/dynaRec/dynaCOP1.c
  • 1964-2002-0922/dynaRec/dynaCOP1.h
  • 1964-2002-0922/dynaRec/dynaCPU.c
  • 1964-2002-0922/dynaRec/dynaCPU.h
  • 1964-2002-0922/dynaRec/dynaCPU_defines.h
  • 1964-2002-0922/dynaRec/dynaHelper.h
  • 1964-2002-0922/dynaRec/dynaLog.c
  • 1964-2002-0922/dynaRec/dynaLog.h
  • 1964-2002-0922/dynaRec/dynaRec.h
  • 1964-2002-0922/dynaRec/opcodeDebugger.h
  • 1964-2002-0922/dynaRec/regcache.c
  • 1964-2002-0922/dynaRec/regcache.h
  • 1964-2002-0922/dynaRec/vssver.scc
  • 1964-2002-0922/dynaRec/x86.c
  • 1964-2002-0922/dynaRec/x86.h
  • 1964-2002-0922/emulator.c
  • 1964-2002-0922/emulator.h
  • 1964-2002-0922/fileio.c
  • 1964-2002-0922/fileio.h
  • 1964-2002-0922/gamesave.c
  • 1964-2002-0922/gamesave.h
  • 1964-2002-0922/globals.c
  • 1964-2002-0922/hardware.h
  • 1964-2002-0922/hle.c
  • 1964-2002-0922/hle.h
  • 1964-2002-0922/iPIF.c
  • 1964-2002-0922/iPIF.h
  • 1964-2002-0922/interrupt.c
  • 1964-2002-0922/interrupt.h
  • 1964-2002-0922/memory.c
  • 1964-2002-0922/memory.h
  • 1964-2002-0922/memory2.c
  • 1964-2002-0922/n64rcp.c
  • 1964-2002-0922/n64rcp.h
  • 1964-2002-0922/netplay-spec.h
  • 1964-2002-0922/netplay.c
  • 1964-2002-0922/netplay.h
  • 1964-2002-0922/plugins.h
  • 1964-2002-0922/profiler.c
  • 1964-2002-0922/r4300i.h
  • 1964-2002-0922/romlist.c
  • 1964-2002-0922/romlist.h
  • 1964-2002-0922/timer.c
  • 1964-2002-0922/timer.h
  • 1964-2002-0922/tooltips.c
  • 1964-2002-0922/win32/1964.bmp
  • 1964-2002-0922/win32/DLL_Rsp.c
  • 1964-2002-0922/win32/DLL_Rsp.h
  • 1964-2002-0922/win32/Dll_Audio.c
  • 1964-2002-0922/win32/Dll_Audio.h
  • 1964-2002-0922/win32/Dll_Input.c
  • 1964-2002-0922/win32/Dll_Input.h
  • 1964-2002-0922/win32/Dll_Video.c
  • 1964-2002-0922/win32/Dll_Video.h
  • 1964-2002-0922/win32/Wingui.c
  • 1964-2002-0922/win32/audio.bmp
  • 1964-2002-0922/win32/icon2.ico
  • 1964-2002-0922/win32/input.bmp
  • 1964-2002-0922/win32/registry.c
  • 1964-2002-0922/win32/registry.h
  • 1964-2002-0922/win32/resource.h
  • 1964-2002-0922/win32/resource.hm
  • 1964-2002-0922/win32/toolbar1.bmp
  • 1964-2002-0922/win32/video.bmp
  • 1964-2002-0922/win32/windebug.c
  • 1964-2002-0922/win32/windebug.h
  • 1964-2002-0922/win32/wingui.h
  • 1964-2002-0922/win32/wingui.rc
  • 1964-2002-0922/win32/wingui2.c
  • 1964-2002-0922/zlib/ioapi.h
  • 1964-2002-0922/zlib/readme.txt
  • 1964-2002-0922/zlib/unzip.h
  • 1964-2002-0922/zlib/vssver.scc
  • 1964-2002-0922/zlib/zconf.h
  • 1964-2002-0922/zlib/zip.h
  • 1964-2002-0922/zlib/zlib.h
  • 1964-2002-0922/zlib/zlib.lib
  • GE-MP/LICENSE.TXT
  • GE-MP/enet/ChangeLog
  • GE-MP/enet/Doxyfile
  • GE-MP/enet/LICENSE
  • GE-MP/enet/Makefile.am
  • GE-MP/enet/Makefile.in
  • GE-MP/enet/README
  • GE-MP/enet/aclocal.m4
  • GE-MP/enet/callbacks.c
  • GE-MP/enet/compress.c
  • GE-MP/enet/config.guess
  • GE-MP/enet/config.sub
  • GE-MP/enet/configure
    .vbs
  • GE-MP/enet/configure.ac
  • GE-MP/enet/depcomp
  • GE-MP/enet/design.txt
  • GE-MP/enet/docs/FAQ.dox
  • GE-MP/enet/docs/design.dox
  • GE-MP/enet/docs/html/FAQ.html
    .html
  • GE-MP/enet/docs/html/Features.html
    .html
  • GE-MP/enet/docs/html/IRCChannel.html
    .html
  • GE-MP/enet/docs/html/Installation.html
    .html
  • GE-MP/enet/docs/html/License.html
    .html
  • GE-MP/enet/docs/html/MailingList.html
    .html
  • GE-MP/enet/docs/html/SourceDistro.html
    .html
  • GE-MP/enet/docs/html/Tutorial.html
    .html
  • GE-MP/enet/docs/html/annotated.html
    .html
  • GE-MP/enet/docs/html/bc_s.png
    .png
  • GE-MP/enet/docs/html/callbacks_8c.html
    .html
  • GE-MP/enet/docs/html/callbacks_8h.html
    .html
  • GE-MP/enet/docs/html/callbacks_8h_source.html
    .html
  • GE-MP/enet/docs/html/classes.html
    .html
  • GE-MP/enet/docs/html/closed.png
    .png
  • GE-MP/enet/docs/html/compress_8c.html
    .html
  • GE-MP/enet/docs/html/doxygen.css
  • GE-MP/enet/docs/html/doxygen.png
    .png
  • GE-MP/enet/docs/html/enet_8h.html
    .html
  • GE-MP/enet/docs/html/enet_8h_source.html
    .html
  • GE-MP/enet/docs/html/files.html
    .html
  • GE-MP/enet/docs/html/functions.html
    .html
  • GE-MP/enet/docs/html/functions_func.html
    .html
  • GE-MP/enet/docs/html/functions_vars.html
    .html
  • GE-MP/enet/docs/html/globals.html
    .html
  • GE-MP/enet/docs/html/globals_defs.html
    .html
  • GE-MP/enet/docs/html/globals_enum.html
    .html
  • GE-MP/enet/docs/html/globals_eval.html
    .html
  • GE-MP/enet/docs/html/globals_func.html
    .html
  • GE-MP/enet/docs/html/globals_type.html
    .html
  • GE-MP/enet/docs/html/group__Address.html
    .html
  • GE-MP/enet/docs/html/group__Packet.html
    .html
  • GE-MP/enet/docs/html/group__callbacks.html
    .html
  • GE-MP/enet/docs/html/group__global.html
    .html
  • GE-MP/enet/docs/html/group__host.html
    .html
  • GE-MP/enet/docs/html/group__list.html
    .html
  • GE-MP/enet/docs/html/group__peer.html
    .html
  • GE-MP/enet/docs/html/group__private.html
    .html
  • GE-MP/enet/docs/html/group__socket.html
    .html
  • GE-MP/enet/docs/html/host_8c.html
    .html
  • GE-MP/enet/docs/html/index.html
    .html
  • GE-MP/enet/docs/html/list_8c.html
    .html
  • GE-MP/enet/docs/html/list_8h.html
    .html
  • GE-MP/enet/docs/html/list_8h_source.html
    .html
  • GE-MP/enet/docs/html/modules.html
    .html
  • GE-MP/enet/docs/html/nav_f.png
    .png
  • GE-MP/enet/docs/html/nav_h.png
    .png
  • GE-MP/enet/docs/html/open.png
    .png
  • GE-MP/enet/docs/html/packet_8c.html
    .html
  • GE-MP/enet/docs/html/pages.html
    .html
  • GE-MP/enet/docs/html/peer_8c.html
    .html
  • GE-MP/enet/docs/html/protocol_8c.html
    .html
  • GE-MP/enet/docs/html/protocol_8h.html
    .html
  • GE-MP/enet/docs/html/protocol_8h_source.html
    .html
  • GE-MP/enet/docs/html/structENetBuffer.html
    .html
  • GE-MP/enet/docs/html/struct__ENetAcknowledgement.html
    .html
  • GE-MP/enet/docs/html/struct__ENetAddress.html
    .html
  • GE-MP/enet/docs/html/struct__ENetCallbacks.html
    .html
  • GE-MP/enet/docs/html/struct__ENetChannel.html
    .html
  • GE-MP/enet/docs/html/struct__ENetCompressor.html
    .html
  • GE-MP/enet/docs/html/struct__ENetEvent.html
    .html
  • GE-MP/enet/docs/html/struct__ENetHost.html
    .html
  • GE-MP/enet/docs/html/struct__ENetIncomingCommand.html
    .html
  • GE-MP/enet/docs/html/struct__ENetList.html
    .html
  • GE-MP/enet/docs/html/struct__ENetListNode.html
    .html
  • GE-MP/enet/docs/html/struct__ENetOutgoingCommand.html
    .html
  • GE-MP/enet/docs/html/struct__ENetPacket.html
    .html
  • GE-MP/enet/docs/html/struct__ENetPeer.html
    .html
  • GE-MP/enet/docs/html/struct__ENetProtocolAcknowledge.html
    .html
  • GE-MP/enet/docs/html/struct__ENetProtocolBandwidthLimit.html
    .html
  • GE-MP/enet/docs/html/struct__ENetProtocolCommandHeader.html
    .html
  • GE-MP/enet/docs/html/struct__ENetProtocolConnect.html
    .html
  • GE-MP/enet/docs/html/struct__ENetProtocolDisconnect.html
    .html
  • GE-MP/enet/docs/html/struct__ENetProtocolHeader.html
    .html
  • GE-MP/enet/docs/html/struct__ENetProtocolPing.html
    .html
  • GE-MP/enet/docs/html/struct__ENetProtocolSendFragment.html
    .html
  • GE-MP/enet/docs/html/struct__ENetProtocolSendReliable.html
    .html
  • GE-MP/enet/docs/html/struct__ENetProtocolSendUnreliable.html
    .html
  • GE-MP/enet/docs/html/struct__ENetProtocolSendUnsequenced.html
    .html
  • GE-MP/enet/docs/html/struct__ENetProtocolThrottleConfigure.html
    .html
  • GE-MP/enet/docs/html/struct__ENetProtocolVerifyConnect.html
    .html
  • GE-MP/enet/docs/html/tab_a.png
    .png
  • GE-MP/enet/docs/html/tab_b.png
    .png
  • GE-MP/enet/docs/html/tab_h.png
    .png
  • GE-MP/enet/docs/html/tab_s.png
    .png
  • GE-MP/enet/docs/html/tabs.css
  • GE-MP/enet/docs/html/time_8h.html
    .html
  • GE-MP/enet/docs/html/time_8h_source.html
    .html
  • GE-MP/enet/docs/html/types_8h.html
    .html
  • GE-MP/enet/docs/html/types_8h_source.html
    .html
  • GE-MP/enet/docs/html/union__ENetProtocol.html
    .html
  • GE-MP/enet/docs/html/unix_8c.html
    .html
  • GE-MP/enet/docs/html/unix_8h.html
    .html
  • GE-MP/enet/docs/html/unix_8h_source.html
    .html
  • GE-MP/enet/docs/html/utility_8h.html
    .html
  • GE-MP/enet/docs/html/utility_8h_source.html
    .html
  • GE-MP/enet/docs/html/win32_8c.html
    .html
  • GE-MP/enet/docs/html/win32_8h.html
    .html
  • GE-MP/enet/docs/html/win32_8h_source.html
    .html
  • GE-MP/enet/docs/install.dox
  • GE-MP/enet/docs/license.dox
  • GE-MP/enet/docs/mainpage.dox
  • GE-MP/enet/docs/tutorial.dox
  • GE-MP/enet/enet.dsp
  • GE-MP/enet/enet_dll.cbp
    .xml
  • GE-MP/enet/host.c
  • GE-MP/enet/include/enet/callbacks.h
  • GE-MP/enet/include/enet/enet.h
  • GE-MP/enet/include/enet/list.h
  • GE-MP/enet/include/enet/protocol.h
  • GE-MP/enet/include/enet/time.h
  • GE-MP/enet/include/enet/types.h
  • GE-MP/enet/include/enet/unix.h
  • GE-MP/enet/include/enet/utility.h
  • GE-MP/enet/include/enet/win32.h
  • GE-MP/enet/install-sh
    .sh .vbs linux polyglot
  • GE-MP/enet/libenet.pc.in
  • GE-MP/enet/list.c
  • GE-MP/enet/ltmain.sh
  • GE-MP/enet/m4/libtool.m4
    .ps1
  • GE-MP/enet/m4/ltoptions.m4
  • GE-MP/enet/m4/ltsugar.m4
  • GE-MP/enet/m4/ltversion.m4
  • GE-MP/enet/m4/lt~obsolete.m4
  • GE-MP/enet/missing
  • GE-MP/enet/packet.c
  • GE-MP/enet/peer.c
  • GE-MP/enet/protocol.c
  • GE-MP/enet/unix.c
  • GE-MP/enet/win32.c
  • GE-MP/icon.ico
  • GE-MP/icon.rc
  • GE-MP/main.c
  • MouseInjectorApp/LICENSE.TXT
  • MouseInjectorApp/icon.ico
  • MouseInjectorApp/icon.rc
  • MouseInjectorApp/main.c
  • MouseInjectorApp/main.h
  • MouseInjectorApp/manymouse/LICENSE.txt
  • MouseInjectorApp/manymouse/manymouse.c
  • MouseInjectorApp/manymouse/manymouse.h
  • MouseInjectorApp/manymouse/windows_wminput.c
  • MouseInjectorPlugin/LICENSE.TXT
  • MouseInjectorPlugin/device.c
  • MouseInjectorPlugin/device.h
  • MouseInjectorPlugin/games/game.c
  • MouseInjectorPlugin/games/game.h
  • MouseInjectorPlugin/games/goldeneye.c
  • MouseInjectorPlugin/games/perfectdark.c
  • MouseInjectorPlugin/global.h
  • MouseInjectorPlugin/maindll.c
    .vbs
  • MouseInjectorPlugin/maindll.h
  • MouseInjectorPlugin/makefile
  • MouseInjectorPlugin/manymouse/LICENSE.txt
  • MouseInjectorPlugin/manymouse/manymouse.c
  • MouseInjectorPlugin/manymouse/manymouse.h
  • MouseInjectorPlugin/manymouse/windows_wminput.c
  • MouseInjectorPlugin/memory.c
  • MouseInjectorPlugin/memory.h
  • MouseInjectorPlugin/ui/resource.h
  • MouseInjectorPlugin/ui/ui.rc
  • MouseInjectorPlugin/vkey.h
  • 1964/xinput1_3.dll
    .dll windows:5 windows x86 arch:x86

    98297a3e38512240e38e385d557c582f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 1964/zlib.dll
    .dll windows:4 windows x86 arch:x86

    e5c5650f0b0c0414d7e983aacdedc6c6


    Headers

    Imports

    Exports

    Sections

  • BUNDLE_README.txt