Overview

overview

7

Static

static

7

2d196877e4...18.exe

windows7-x64

7

2d196877e4...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Mame32.chm

windows7-x64

1

Mame32.chm

windows10-2004-x64

1

kailleraclient.dll

windows7-x64

1

kailleraclient.dll

windows10-2004-x64

7

mame32k.exe

windows7-x64

7

mame32k.exe

windows10-2004-x64

7

mame32kk.exe

windows7-x64

1

mame32kk.exe

windows10-2004-x64

1

zip32.dll

windows7-x64

3

zip32.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2d196877e4b189ce233803e038092cc9_JaffaCakes118

  • Size

    7.1MB

  • MD5

    2d196877e4b189ce233803e038092cc9

  • SHA1

    68224f8882f08e81f97fd9ea68c9268f47e47411

  • SHA256

    5e68472af1982f1b41aaefb3daf4ce3e3ff5cc117b768e5ef4b8561d39b108cf

  • SHA512

    139a73567829d5085b07dcdb9834c77e0f197e70701f3deb859043a03c6f331d3474f6dd3d9d4a44b957203a283584c090519210cce04bb49789144a40ace9e7

  • SSDEEP

    196608:Lqk3JXCnMPThOxwccMzEBmubR1cYhtK0zzeR:Lz4MAxwgKm8IYhtbeR

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d196877e4b189ce233803e038092cc9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • MAME32kui.ini
  • Main_dtdj.ini
  • Mame32.chm
    .chm
  • cfg/default.cfg
  • hook.zip
    .zip
  • h-h0-d.rom
  • h-h1.rom
  • h-l0-d.rom
  • h-l1.rom
  • h-sh0.rom
  • h-sl0.rom
  • hook-000.rom
  • hook-010.rom
  • hook-020.rom
  • hook-030.rom
  • hook-c0.rom
  • hook-c1.rom
  • hook-c2.rom
  • hook-c3.rom
  • hook-da.rom
  • ini/MAME32k.ini
  • join.wav
  • kaillera.txt
  • kailleraclient.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • mame32k
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • mame32kk.exe
    .exe windows:5 windows x86 arch:x86

    4dbc5d08df28b8f55d5238d42ee67fa8


    Headers

    Imports

    Sections

  • readme.txt
  • roms/hook.zip
    .zip
  • h-h0-d.rom
  • h-h1.rom
  • h-l0-d.rom
  • h-l1.rom
  • h-sh0.rom
  • h-sl0.rom
  • hook-000.rom
  • hook-010.rom
  • hook-020.rom
  • hook-030.rom
  • hook-c0.rom
  • hook-c1.rom
  • hook-c2.rom
  • hook-c3.rom
  • hook-da.rom
  • roms/neogeo.zip
    .zip
  • neo-geo.rom
  • ng-lo.rom
  • ng-sfix.rom
  • ng-sm1.rom
  • zip32.dll
    .dll windows:4 windows x86 arch:x86

    db1e4d25a40dfd2a9f2ff326c81166fe


    Headers

    Imports

    Exports

    Sections