General

  • Target

    2898c2c3d3b22b66281bae84bf5f6362_JaffaCakes118

  • Size

    11.3MB

  • MD5

    2898c2c3d3b22b66281bae84bf5f6362

  • SHA1

    839fefb48fe429173caf698098c15d1e5f4aed72

  • SHA256

    3aa9f5eb063844920878a794ab5378e94430ae04dcec2fa97058c166329aae96

  • SHA512

    33b5e0ae8980baa9817d75c155ed5fcee680d682b0372ba919e7ac99e8a4a968bbf49bc160b88829f7f51f6949c2165841c38365b361731be6a0c3714b96b434

  • SSDEEP

    196608:UEotz8ef3mrUCW1C163hSGPKcA+Mlv5SxvjcweuqKsatLt:iX3mcC+8GCcA+MlYxAeOWLt

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 2898c2c3d3b22b66281bae84bf5f6362_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/DefCamSetup-English.ini
  • $PLUGINSDIR/DefCamSetup-Simpchinese.ini
  • $PLUGINSDIR/DefCamSetup-Tradchinese.ini
  • $PLUGINSDIR/DefCamSetup.dll
    .dll windows:4 windows x86 arch:x86

    0843fc35a546e4ff989f2c0b0f345e69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GGExit.exe
    .exe windows:4 windows x86 arch:x86

    eedec5ce5c99c872622f21ddf098d820


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    295fc8c35dee88b924b0f6bafc807c6c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Dance/5BO_BSHOW.ico
  • Dance/AudioCapture.dll
    .dll windows:4 windows x86 arch:x86

    762b13b876a54f52c249939b179810a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/AudioCodec1.dll
    .dll windows:4 windows x86 arch:x86

    f8410c3dce8c223672198bb8cd34c429


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/AudioCodec2.dll
    .dll windows:4 windows x86 arch:x86

    f6b9b7f76f67521152057b9e22b48c89


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/AudioCodec3.dll
    .dll windows:4 windows x86 arch:x86

    73b8553e8adb7e658ef50d0961c5b298


    Code Sign

    Headers

    Imports

    Sections

  • Dance/AudioDecodec3.dll
    .dll windows:4 windows x86 arch:x86

    fb0d04ce49d8c7c6a22f3824469aaf95


    Code Sign

    Headers

    Imports

    Sections

  • Dance/ChatHall.exe
    .exe windows:4 windows x86 arch:x86

    02c337a2d3698f2ebe440e1dbf101456


    Code Sign

    Headers

    Imports

    Sections

  • Dance/ChatHall.ini
  • Dance/ChatRoom/ChatRoomClient.dll
    .dll windows:4 windows x86 arch:x86

    782413a3e05168360f8dc444a2dd3d26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/ChatRoomUI.dll
    .dll windows:4 windows x86 arch:x86

    a33ac7a2aa85a20347d6b9cd3ac85abd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/Config.ini
  • Dance/ChatRoom/RoomRadioMgr.dll
    .dll windows:4 windows x86 arch:x86

    560d51bbe32d3ad6c197407108eeaa9c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/Skin/2010beta1ChatRoom.ggs
  • Dance/ChatRoom/Skin/2010beta2RoomRadioMgr.ggs
  • Dance/ChatRoom/Skin/Alarm.png
    .png
  • Dance/ChatRoom/Skin/DefFace.bmp
  • Dance/ChatRoom/Skin/PrivteMic.bmp
  • Dance/ChatRoom/Skin/VideoBack.bmp
  • Dance/ChatRoom/Skin/VideoBack2.bmp
  • Dance/ChatRoom/Skin/WndBack.bmp
  • Dance/ChatRoom/Skin/bg1.jpg
    .jpg
  • Dance/ChatRoom/Skin/wedhead.jpg
    .jpg
  • Dance/ChatRoom/UIToolTip.dll
    .dll windows:4 windows x86 arch:x86

    04897ae99bc29616991912ca68521429


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/VcrMediaLib.dll
    .dll windows:4 windows x86 arch:x86

    408879edc14569be9924251c0fc7dfd9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/VolumeCtrl.dll
    .dll windows:5 windows x86 arch:x86

    9f214f5ff27e25a36acb6f280f58f6be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/VolumeCtrlForVista.dll
    .dll windows:5 windows x86 arch:x86

    c7af61f9a000f0b992891a89efd630f8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/data/FlowerData.dat
  • Dance/ChatRoom/plug_folder_focus.bmp
  • Dance/ChatRoom/plug_folder_normal.bmp
  • Dance/ChatRoomUI.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    135cc4765d434b7922f2bb51b73648fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/DnsSession.dll
    .dll windows:4 windows x86 arch:x86

    43d17f529f26f51b6f12b182d9cc0d38


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Downloader.exe
    .exe windows:4 windows x86 arch:x86

    9c1807b39fbc34cab8dda6752d922a9f


    Code Sign

    Headers

    Imports

    Sections

  • Dance/EncWmv.dll
    .dll windows:4 windows x86 arch:x86

    5b3f9a2956f683d60eb5c773dd4ed6f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/EquipCenter.dll
    .dll windows:4 windows x86 arch:x86

    d8d7f4527fc8302dfe91ea7df3718db5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/GameMediaLib.dll
    .dll windows:4 windows x86 arch:x86

    89dd1f67cbc9f7f926dedce3b1b30bcb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ImageOle.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    18e201c66fb36f0c34f99d047daacbc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/MFC71u.dll
    .dll windows:4 windows x86 arch:x86

    b3fbf4599c17e9bc7ccae6518bf0f868


    Code Sign

    Headers

    Imports

    Sections

  • Dance/Mp4Maker.exe
    .exe windows:4 windows x86 arch:x86

    1f68c90cff8a30b4c0e3f92a4f23f231


    Code Sign

    Headers

    Imports

    Sections

  • Dance/OemIcon.ico
  • Dance/Player/AudioCapture.dll
    .dll windows:4 windows x86 arch:x86

    762b13b876a54f52c249939b179810a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/AudioCodec2.dll
    .dll windows:4 windows x86 arch:x86

    f6b9b7f76f67521152057b9e22b48c89


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/CapSreen.dll
    .dll windows:4 windows x86 arch:x86

    efbe3f777bf973830c112bf43229f5b5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/Config.ini
  • Dance/Player/DeskLrc/LyricPicture/A1.bmp
  • Dance/Player/DeskLrc/LyricPicture/A2.bmp
  • Dance/Player/DeskLrc/LyricPicture/B1.bmp
  • Dance/Player/DeskLrc/LyricPicture/B2.bmp
  • Dance/Player/DeskLrc/LyricPicture/C1.bmp
  • Dance/Player/DeskLrc/LyricPicture/C2.bmp
  • Dance/Player/DeskLrc/LyricPicture/D1.bmp
  • Dance/Player/DeskLrc/LyricPicture/D2.bmp
  • Dance/Player/DeskLrc/LyricPicture/E1.bmp
  • Dance/Player/DeskLrc/LyricPicture/E2.bmp
  • Dance/Player/DeskLrc/LyricPicture/F1.bmp
  • Dance/Player/DeskLrc/LyricPicture/F2.bmp
  • Dance/Player/DeskLrc/LyricPicture/G1.bmp
  • Dance/Player/DeskLrc/LyricPicture/G2.bmp
  • Dance/Player/DeskLrc/LyricShowSetting.ini
  • Dance/Player/EncWmv.dll
    .dll windows:4 windows x86 arch:x86

    5b3f9a2956f683d60eb5c773dd4ed6f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/Filter/Antique.bmp
  • Dance/Player/Filter/Carmine.bmp
  • Dance/Player/Filter/Cinerous.bmp
  • Dance/Player/Filter/DbSidMirror.bmp
  • Dance/Player/Filter/DisBlue.bmp
  • Dance/Player/Filter/DisGreen.bmp
  • Dance/Player/Filter/GrayScale.bmp
  • Dance/Player/Filter/Inverse.bmp
  • Dance/Player/Filter/Lilac.bmp
  • Dance/Player/GGPlayer.exe
    .exe windows:4 windows x86 arch:x86

    3206fb77aa2988924024b169c418b9c7


    Code Sign

    Headers

    Imports

    Sections

  • Dance/Player/LyricEditor.dll
    .dll windows:4 windows x86 arch:x86

    c56c68f30b59f656fe074877412c70bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/LyricShow.dll
    .dll windows:4 windows x86 arch:x86

    23316f12dca3053fff2d0bdce224fe38


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/MFC71u.dll
    .dll windows:4 windows x86 arch:x86

    b3fbf4599c17e9bc7ccae6518bf0f868


    Headers

    Imports

    Sections

  • Dance/Player/MediaCenter.dll
    .dll windows:4 windows x86 arch:x86

    38605676ac52a020b3fca87cecba5d95


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/MediaInfo.dll
    .dll windows:4 windows x86 arch:x86

    1fbb32f9ea28000cfb91d2e00189a22e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/MediaPlayer.dll
    .dll windows:4 windows x86 arch:x86

    768fcac80e538bbeb294465edac66bd4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/PlayerOcx.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    4a6c012a014e4531e9105e80df545079


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/ProcessCS.dll
    .dll windows:4 windows x86 arch:x86

    0c023da8453463660b5e4425bb44189b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/Slide.dll
    .dll windows:4 windows x86 arch:x86

    a4f24ee3dfb74bb0c708583e595625af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/UICtrls.dll
    .dll windows:4 windows x86 arch:x86

    921dc7e6324f21371d222d8e1277d3cc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/VRCamera$_5_.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    10798220f1cbe5d01a8c02e6c0b704b7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/VRCamera.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    10798220f1cbe5d01a8c02e6c0b704b7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/VideoCapture.dll
    .dll windows:4 windows x86 arch:x86

    e5b55b71f8f4a42958bcaad98abfdaf3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/VideoEffect.dll
    .dll windows:4 windows x86 arch:x86

    fc4e7b5ec3969c5ccd25156519973d3e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/VolumeCtrl.dll
    .dll windows:5 windows x86 arch:x86

    9f214f5ff27e25a36acb6f280f58f6be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/data/IllWord.dat
  • Dance/Player/data/common.dat
  • Dance/Player/gdiplus.dll
    .dll windows:5 windows x86 arch:x86

    7941976a82dd7ff8b1a2ea069878fab3


    Headers

    Imports

    Exports

    Sections

  • Dance/Player/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • Dance/Player/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • Dance/Player/skin/DefaultSkinPlayer.ggs
  • Dance/Player/skin/PlayerBack.bmp
  • Dance/Player/skin/PlayerBack176.bmp
  • Dance/Player/skin/PlayerBack240.bmp
  • Dance/Player/skin/PlayerBack352.bmp
  • Dance/Player/skin/PlayerBack640.bmp
  • Dance/ResCenter.dll
    .dll windows:4 windows x86 arch:x86

    01e5253a44173e5f467d225298f22084


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/RtpStack.DLL
    .dll windows:4 windows x86 arch:x86

    784794bd29e6f793431c8af904f233f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Skin/2010beta1DownLoader.ggs
  • Dance/Skin/2010beta1EquipCenterSkin.ggs
  • Dance/Skin/2010beta1Skin.ggs
  • Dance/Skin/2010beta1Skin_0.ggs
  • Dance/Skin/2010beta1UpdateSkin.ggs
  • Dance/Skin/2010beta1UserInfoSkin.ggs
  • Dance/Skin/Alarm.png
    .png
  • Dance/Skin/DefFace.bmp
  • Dance/Skin/DefFace_16.bmp
  • Dance/Skin/DefFace_21.bmp
  • Dance/Skin/DefSendedStarGift.gif
    .gif
  • Dance/Skin/DefStarLevel.bmp
  • Dance/Skin/DefaultCar.gif
    .gif
  • Dance/Skin/GiftButtonBK.bmp
  • Dance/Skin/VideoBack.bmp
  • Dance/Skin/WndBack.bmp
  • Dance/Skin/default_female.png
    .png
  • Dance/Skin/default_male.png
    .png
  • Dance/Skin/jilv.jpg
    .jpg
  • Dance/Skin/login.gif
    .gif
  • Dance/Skin/progressbar.gif
    .gif
  • Dance/Thumbs.db
  • Dance/UIToolTip.dll
    .dll windows:4 windows x86 arch:x86

    0b5fe4eb2b7be03512291391bd4a08c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Update.exe
    .exe windows:4 windows x86 arch:x86

    271cb0154fc9f39f8dedc9518fb189bf


    Code Sign

    Headers

    Imports

    Sections

  • Dance/UserInfoCenter.dll
    .dll windows:4 windows x86 arch:x86

    e1f67689fcf55f0a712f39e741f1c455


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/VideoCapture.dll
    .dll windows:4 windows x86 arch:x86

    a8638fcc38ef377834e80577f30abd68


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/VideoCodec1.dll
    .dll windows:4 windows x86 arch:x86

    25a7dddc6585fb86545c4455570f7566


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/VideoDecode2.dll
    .dll windows:4 windows x86 arch:x86

    a4bacaf55e89f395e2a6d80f0fb45bfb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/VideoEncode2.dll
    .dll windows:4 windows x86 arch:x86

    3b43ecc47d73f03f9ca67aaf55bcbcc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/WebGame/Category.bmp
  • Dance/WebGame/Config.ini
  • Dance/data/IllWord.dat
  • Dance/data/Update.dat
  • Dance/data/common.dat
  • Dance/gdiplus.dll
    .dll windows:5 windows x86 arch:x86

    7941976a82dd7ff8b1a2ea069878fab3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst9.exe.nsis