General

  • Target

    b3121bc87d76473d8ba6ee81dde7aa21_JaffaCakes118

  • Size

    6.3MB

  • MD5

    b3121bc87d76473d8ba6ee81dde7aa21

  • SHA1

    978d2423e7cb31b997a07c88ae2ece06e9256349

  • SHA256

    c685b0236de3c6ad8db7fd6ad5a7a2255b2c2cfc29279f5c194e5f63fa36c6c5

  • SHA512

    1025c03f42ee775eb97776fd1b0ed26274d230ecc117d4ddcae79bee9c9d196ec77159dc704f173fb64e5a417c480a0f469957f31db7697a1305186a0bdb0745

  • SSDEEP

    196608:yOGVIBlEl+BlvhEQwn6eZkuqgPpLlOMMi9/:y/Vuyl+BlvBwxkyZlt9/

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • b3121bc87d76473d8ba6ee81dde7aa21_JaffaCakes118
    .zip
  • ??.txt
  • ?????.url
  • ?????_downcc.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $0
    .exe windows:5 windows x86 arch:x86

    a28733685f9756f0ce0fc4fdfa263284


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ButtonLinker.dll
    .dll windows:4 windows x86 arch:x86

    8466b6530f29387ac28e94fe1e74b98f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InetLoad.dll
    .dll windows:4 windows x86 arch:x86

    24a4a671f5cc294ce3543d18a1e873cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/left.bmp
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsisXML.dll
    .dll windows:4 windows x86 arch:x86

    d9ee494a2a7b0d46616d9537ef3d8431


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/waterctrl.dll
    .dll windows:4 windows x86 arch:x86

    cd2ffec7e2da8a6dd4a84791a95597a7


    Headers

    Imports

    Exports

    Sections

  • 7z.dll
    .dll windows:4 windows x86 arch:x86

    6121a49841bf6f5b3700c1ebbb28be41


    Headers

    Imports

    Exports

    Sections

  • AQDownloader.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • History.txt
  • LLConfig.dll
    .dll windows:5 windows x86 arch:x86

    23f9a95b5e79ce39f5d51b49e351ab00


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LLCore.dll
    .dll windows:5 windows x86 arch:x86

    b68c1e009a44029784ef3b950b49c1b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LLDatabase.dll
    .dll windows:5 windows x86 arch:x86

    fd1a294d1160f98e00ced63d70e3072c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LLGame.dll
    .dll windows:5 windows x86 arch:x86

    28c0c95a73fc9e7c6886c25db9d99e2b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LLGameBox.exe
    .exe windows:5 windows x86 arch:x86

    7652302c60c816cee2712654b903d330


    Code Sign

    Headers

    Imports

    Sections

  • LLSystem.dll
    .dll windows:5 windows x86 arch:x86

    f4ad72608b7af1f6600dd407cb5168aa


    Headers

    Imports

    Exports

    Sections

  • LLUser.dll
    .dll windows:5 windows x86 arch:x86

    b18bc3773254dd3be79135bba18cfbec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Manager.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    23b44bdd3dc835e74c80e3ebf5af94f7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PlayGame.exe
    .exe windows:5 windows x86 arch:x86

    0d605af9dc91369f3edc1011d10625a2


    Code Sign

    Headers

    Imports

    Sections

  • Resource.dll
    .dll windows:5 windows x86 arch:x86

    4246b8a94cd49d264530f9b8bff6e64d


    Headers

    Imports

    Sections

  • Update.exe
    .exe windows:5 windows x86 arch:x86

    60360eb1820de1774abdb12ddfba442a


    Code Sign

    Headers

    Imports

    Sections

  • atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • dl_peer_id.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2827932cca8caf8a10f65e148687b7a0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • download_engine.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9785d36be216689645536e49d92f3302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • html/index/js/function.js
    .js
  • html/index/js/jquery-1.9.1.min.js
    .js
  • html/index/js/json2.js
    .js
  • html/index/js/main.js
    .js
  • html/index/my/index.html
    .html
  • html/index/skin/images/body_bj.png
    .png
  • html/index/skin/images/pub.gif
    .gif
  • html/index/skin/images/top_bj.jpg
    .jpg
  • html/index/skin/main.css
  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • zlib1.dll
    .dll windows:4 windows x86 arch:x86

    e9b5d30fbeb84dc7dd0e2c36954e6d47


    Headers

    Imports

    Exports

    Sections

  • ¸üÐÂÈÕÖ¾.txt
  • ÀÖÀÖ˵Ã÷.txt
  • ×¢²á.bat