Overview

overview

7

Static

static

3

28e61cdec8...18.exe

windows7-x64

7

28e61cdec8...18.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

DTDJ_1.exe

windows7-x64

1

DTDJ_1.exe

windows10-2004-x64

1

Gjxq/Gjxq.exe

windows7-x64

1

Gjxq/Gjxq.exe

windows10-2004-x64

1

gjxq.exe

windows7-x64

1

gjxq.exe

windows10-2004-x64

1

gjxqdz.exe

windows7-x64

1

gjxqdz.exe

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

zlhall.exe

windows7-x64

1

zlhall.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    28e61cdec89da91fac4beecab4700f68_JaffaCakes118

  • Size

    1.5MB

  • MD5

    28e61cdec89da91fac4beecab4700f68

  • SHA1

    6ab1affb5e9b7846891c683c011b1740ea5031bc

  • SHA256

    5f446cf819a39413b99f266dfc0c8bb85afa5d0710896ff2f8e73c6c34763845

  • SHA512

    ef3d98a31b2a0d139142eb240de547b8dd64829c661cd4a5814b2705ea2e0235529ae5397c65df3db46364a45eef6e7fdcec910e6220f94cc87ab7a470ba4518

  • SSDEEP

    24576:kpT4Ul1gRQkZWNdWIy4ckBuIYDkxtuVFvXFIpRDgjcJ3wLHX2ThP4gfw4rL6zYtf:kx1JkZWqI1Yaxq8f8cJuHX29P4GwOL6y

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • 28e61cdec89da91fac4beecab4700f68_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    711c893e4d8189fd14b6563a4e35e663


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    946eb0a1e85c9ade4acaf634eb5a64f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • DTDJ_1.exe
    .exe windows:5 windows x86 arch:x86

    4dbc5d08df28b8f55d5238d42ee67fa8


    Headers

    Imports

    Sections

  • Gjxq/Clock.wav
  • Gjxq/Gjxq.exe
    .exe windows:4 windows x86 arch:x86

    a42ba29e6dda5acc83321f48efd2e6ae


    Headers

    Imports

    Sections

  • Gjxq/check.wav
  • Gjxq/eat.wav
  • Gjxq/gjxq.bmp
  • Gjxq/gjxq.cfg
  • Gjxq/lose.wav
  • Gjxq/move.wav
  • Gjxq/peace.wav
  • Gjxq/turn.wav
  • Main_dtdj.ini
  • WIN.WAV
  • chess.mid
  • gjxq.bg
  • gjxq.cfg
  • gjxq.exe
    .exe windows:4 windows x86 arch:x86

    565e15fddfaa931e320b89fe66e8c58c


    Headers

    Imports

    Sections

  • gjxq.mid
  • gjxqdz.exe
    .exe windows:4 windows x86 arch:x86

    75820bac4c295aa5e2d0e6da3915457d


    Headers

    Imports

    Sections

  • lose.wav
  • peace.wav
  • room.cfg
  • skin/Thumbs.db
  • skin/Tree.bmp
  • skin/hall/Dialog.bmp
  • skin/hall/Explorer.bmp
  • skin/hall/Mdi.bmp
  • skin/hall/Menuborder.bmp
  • skin/hall/Thumbs.db
  • skin/hall/bottom.bmp
  • skin/hall/button.bmp
  • skin/hall/checkbox.bmp
  • skin/hall/close.bmp
  • skin/hall/left.bmp
  • skin/hall/max.bmp
  • skin/hall/menu.bmp
  • skin/hall/min.bmp
  • skin/hall/neoplanetfull.uis
  • skin/hall/progress.bmp
  • skin/hall/radio.bmp
  • skin/hall/restore.bmp
  • skin/hall/right.bmp
  • skin/hall/scrollhb.bmp
  • skin/hall/scrollhz.bmp
  • skin/hall/scrollvb.bmp
  • skin/hall/scrollvt.bmp
  • skin/hall/start.bmp
  • skin/hall/tabborder.bmp
  • skin/hall/tabs.bmp
  • skin/hall/task.bmp
  • skin/hall/taskbar.bmp
  • skin/hall/theme.ini
  • skin/hall/toolbar.bmp
  • skin/hall/top.bmp
  • skin/logon/Dialog.bmp
  • skin/logon/Explorer.bmp
  • skin/logon/Mdi.bmp
  • skin/logon/Menuborder.bmp
  • skin/logon/Thumbs.db
  • skin/logon/bottom.bmp
  • skin/logon/button.bmp
  • skin/logon/checkbox.bmp
  • skin/logon/close.bmp
  • skin/logon/left.bmp
  • skin/logon/max.bmp
  • skin/logon/menu.bmp
  • skin/logon/min.bmp
  • skin/logon/neoplanetfull.uis
  • skin/logon/progress.bmp
  • skin/logon/radio.bmp
  • skin/logon/restore.bmp
  • skin/logon/right.bmp
  • skin/logon/scrollhb.bmp
  • skin/logon/scrollhz.bmp
  • skin/logon/scrollvb.bmp
  • skin/logon/scrollvt.bmp
  • skin/logon/start.bmp
  • skin/logon/tabborder.bmp
  • skin/logon/tabs.bmp
  • skin/logon/task.bmp
  • skin/logon/taskbar.bmp
  • skin/logon/theme.ini
  • skin/logon/toolbar.bmp
  • skin/logon/top.bmp
  • skin/verify.dat
  • tree.cfg
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • user.dat
  • zlcli.cfg
  • zlcli.ini
  • zlhall.exe
    .exe windows:4 windows x86 arch:x86

    f7f2970382c9a09cc0fc52e8ae554a0e


    Headers

    Imports

    Sections