General

  • Target

    3691a72927d53f0d6c9b38343a0999b9_JaffaCakes118

  • Size

    3.8MB

  • MD5

    3691a72927d53f0d6c9b38343a0999b9

  • SHA1

    1f853fb984a866185870c7462c0599083074e16f

  • SHA256

    e3697831bcd29abfaf0a2b7d74b5b42d0ebaef5625f45b617170bfeeade8af70

  • SHA512

    9377c3b7f48b0da1579f1dbdf8afeceec5700c4c39a68bf21a023083ca62aa36b9f1b26a6e8ade87305a573cb919b925adf303732d5317a763e385d28b7af468

  • SSDEEP

    98304:cjy0yKspLRuTv7YoK1T6zI6MBobSfu1oiBar/peNj/N:ggLRc7YocSI6AxWWibN

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 3691a72927d53f0d6c9b38343a0999b9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SMPROGRAMS/ַ/155ɫվ.lnk
    .lnk
  • 155ɫվ.lnk
    .lnk
  • Alchemy.exe
    .exe windows:4 windows x86 arch:x86

    739feadefee53fdc886f4aa583b6c42a


    Code Sign

    Headers

    Imports

    Sections

  • bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • data/afont1.txt
  • data/alphadigits4.txt
  • data/crazyfont.txt
  • data/diff.txt
  • data/font1.txt
  • data/levelfont1.txt
  • data/overfont1.txt
  • data/scorefont.txt
  • data/titlefont.txt
  • images/_afont1.gif
    .gif
  • images/_backdrop.gif
    .gif
  • images/_cursor1.gif
    .gif
  • images/_dialog.gif
    .gif
  • images/_font1.png
    .png
  • images/_gameover.gif
    .gif
  • images/_hiscorebox.gif
    .gif
  • images/_next.gif
    .gif
  • images/_overhand.gif
    .gif
  • images/_pointer2.gif
    .gif
  • images/_scorefont.gif
    .gif
  • images/_skulls.gif
    .gif
  • images/_symbols.gif
    .gif
  • images/_titlefont.gif
    .gif
  • images/_wizardhead.gif
    .gif
  • images/_wizmouth2.gif
    .gif
  • images/_wizmouth3.gif
    .gif
  • images/_wizmouth4.gif
    .gif
  • images/_wizmouth5.gif
    .gif
  • images/backdrop.jpg
    .jpg
  • images/bigexplosion.gif
    .gif
  • images/brightline.gif
    .gif
  • images/britelight.gif
    .gif
  • images/bubbleburst.gif
    .gif
  • images/bubbles2.png
    .png
  • images/bubbles7.gif
    .gif
  • images/buttonstrip.gif
    .gif
  • images/cartoonstar.gif
    .gif
  • images/checked.png
    .png
  • images/cursor1.gif
    .gif
  • images/dbutton.png
    .png
  • images/dialog.gif
    .gif
  • images/editbox.png
    .png
  • images/forgeback2.gif
    .gif
  • images/gameover.gif
    .gif
  • images/gameselector_base.jpg
    .jpg
  • images/gameselector_greenon.jpg
    .jpg
  • images/gameselector_newgameon.jpg
    .jpg
  • images/gameselector_redon.jpg
    .jpg
  • images/gameselector_tuton.jpg
    .jpg
  • images/gems1.gif
    .gif
  • images/gems2.gif
    .gif
  • images/glassbuttons.gif
    .gif
  • images/glassbuttons.png
    .png
  • images/greenbar.png
    .png
  • images/helparrow.gif
    .gif
  • images/helpstrip.png
    .png
  • images/hiscorebox.jpg
    .jpg
  • images/hiscorebtn.gif
    .gif
  • images/level2.jpg
    .jpg
  • images/level3.jpg
    .jpg
  • images/level4.jpg
    .jpg
  • images/level5.jpg
    .jpg
  • images/level6.jpg
    .jpg
  • images/level7.jpg
    .jpg
  • images/level8.jpg
    .jpg
  • images/level9.jpg
    .jpg
  • images/levelfont1.png
    .png
  • images/light.gif
    .gif
  • images/next.gif
    .gif
  • images/nullblock.png
    .png
  • images/overfont1.png
    .png
  • images/overhand.gif
    .gif
  • images/pointer2.gif
    .gif
  • images/quitgamestrip.gif
    .gif
  • images/quitgamestrip.png
    .png
  • images/redcircle.png
    .png
  • images/scorefont.gif
    .gif
  • images/selectorbutton.png
    .png
  • images/skulls.gif
    .gif
  • images/slider.png
    .png
  • images/slidergem.png
    .png
  • images/smsparkle.gif
    .gif
  • images/soundstrip.gif
    .gif
  • images/soundstrip.png
    .png
  • images/symbols.gif
    .gif
  • images/tinybubble1.gif
    .gif
  • images/tinysparkle.gif
    .gif
  • images/title.jpg
    .jpg
  • images/titlefont.gif
    .gif
  • images/trialversion.jpg
    .jpg
  • images/typer.gif
    .gif
  • images/unchecked.png
    .png
  • images/waitbar.gif
    .gif
  • images/wave1.gif
    .gif
  • images/wizardhead.gif
    .gif
  • images/wizmouth2.gif
    .gif
  • images/wizmouth3.gif
    .gif
  • images/wizmouth4.gif
    .gif
  • images/wizmouth5.gif
    .gif
  • license.txt
  • music/1985-HeHasNoFace.s3m
  • music/alch_intro.s3m
  • properties/default.xml
    .xml
  • properties/partner.xml
  • properties/partner.xml.sig
  • readme.html
    .html
  • savegame.dat
  • sounds/bad.ogg
  • sounds/button.ogg
  • sounds/cached_bad.wav
  • sounds/cached_click.wav
  • sounds/cached_endofgame.wav
  • sounds/cached_finalgong.wav
  • sounds/cached_finalvanish.wav
  • sounds/cached_forgedown.wav
  • sounds/cached_gemchange.wav
  • sounds/cached_melt.wav
  • sounds/cached_skull.wav
  • sounds/cached_thunk.wav
  • sounds/cached_v4-gameover.wav
  • sounds/cached_v4-levelcomplete.wav
  • sounds/cached_v4-welcome.wav
  • sounds/cached_warning.wav
  • sounds/click.ogg
  • sounds/endofgame.ogg
  • sounds/finalgong.ogg
  • sounds/finalvanish.ogg
  • sounds/forgedown.ogg
  • sounds/gemchange.ogg
  • sounds/melt.ogg
  • sounds/skull.ogg
  • sounds/slideback.ogg
  • sounds/thunk.ogg
  • sounds/v4-gameover.ogg
  • sounds/v4-levelcomplete.ogg
  • sounds/v4-welcome.ogg
  • sounds/warning.ogg
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.