General

  • Target

    397764b01ed1364846e96dabea8e9ef6_JaffaCakes118

  • Size

    1.4MB

  • MD5

    397764b01ed1364846e96dabea8e9ef6

  • SHA1

    c20051546d93723c834e6d35c73bf77a2fa57086

  • SHA256

    393ddd8054c67127c00a1048bec77b298d736c808655ae7df7eed2ba953b0902

  • SHA512

    c22235eb2b219aea7b8a272cdc77a822d95f666bdbeed2690f8ca672897c8d633736cff74a0a403080a4fe2d8f7559c81a7436e2a878cb132e2b61aff2cb66d4

  • SSDEEP

    24576:79xzv4+HH0eohqKazGB/i0DlbCDZ5ReFjvvjTaMWGq+ZR3yquuPbeSuTEcAekHOZ:7fzwwH0eohqKCG1i0kLRqz3WsFqSuTl7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 397764b01ed1364846e96dabea8e9ef6_JaffaCakes118
    .rar
  • PlayTu/ClientAgent.dll
    .dll windows:4 windows x86 arch:x86

    4d5709c500118d07aba021dda98f1c7b


    Headers

    Imports

    Exports

    Sections

  • PlayTu/TuPlay.exe
    .exe windows:4 windows x86 arch:x86

    9b7536d2fbedb1f54cffb9016217e928


    Headers

    Imports

    Sections

  • PlayTu/album.dat
  • PlayTu/config.dat
  • PlayTu/face/normal.face
  • PlayTu/gdiplus.dll
    .dll windows:5 windows x86 arch:x86

    74128e0be9d74ea843dcf2122821720b


    Headers

    Imports

    Exports

    Sections

  • PlayTu/sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    08c5dbd63927bf0ba5d656a5f06614bb


    Headers

    Imports

    Exports

    Sections

  • PlayTu/today/100000.jpg
    .jpg
  • PlayTu/today/100001.jpg
    .jpg
  • PlayTu/today/ico_100000.JPG
    .jpg
  • PlayTu/today/ico_100001.jpg
    .jpg