Overview

overview

7

Static

static

3

3d10ea4cbb...18.exe

windows7-x64

7

3d10ea4cbb...18.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

DTDJ_1.exe

windows7-x64

1

DTDJ_1.exe

windows10-2004-x64

1

landlord4.exe

windows7-x64

1

landlord4.exe

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3d10ea4cbb784493a61bb723aff8cefb_JaffaCakes118

  • Size

    1.0MB

  • MD5

    3d10ea4cbb784493a61bb723aff8cefb

  • SHA1

    28cc6b5aa7eac7a85a704d1a9e9f4ab430a4fc16

  • SHA256

    32f97dbaf5e27729851ee2ea98e753c8cf0382098a07facf3c970e0a5327e647

  • SHA512

    eb62b9936b5181259ae1836441a502320115f6860819ceca75a331adbbef65115f506dc64018b98c882105a93d0b538240beaa19dc602627708c4b5e15c1318c

  • SSDEEP

    24576:MT4Ulp/T9hPfig6Nhu6tYkRKDOerJO87VyelcvHasH9:Yp/TTK+2FELyhvHx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d10ea4cbb784493a61bb723aff8cefb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    711c893e4d8189fd14b6563a4e35e663


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    946eb0a1e85c9ade4acaf634eb5a64f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • DTDJ_1.exe
    .exe windows:5 windows x86 arch:x86

    4dbc5d08df28b8f55d5238d42ee67fa8


    Headers

    Imports

    Sections

  • Main_dtdj.ini
  • landlord4.exe
    .exe windows:4 windows x86 arch:x86

    5ae05117fadfabecc5e3e7f042950d5f


    Headers

    Imports

    Sections

  • res/2.cur
  • res/29002.bmp
  • res/29003.bmp
  • res/29005.bmp
  • res/BodyLeft.bmp
  • res/BodyRight.bmp
  • res/BottomLeft.bmp
  • res/BottomMiddle.bmp
  • res/BottomRight.bmp
  • res/GameView/Thumbs.db
  • res/GameView/back.bmp
  • res/GameViewLeft.bmp
  • res/GameViewTop.bmp
  • res/Hand.cur
  • res/HorizontalScrollBarLeftArrow.bmp
  • res/HorizontalScrollBarRightArrow.bmp
  • res/HorizontalScrollBarSpan.bmp
  • res/ListCtrl_Tile.bmp
  • res/Login/IMButton_Default.bmp
  • res/Login/IMButton_Down.bmp
  • res/Login/IMButton_Hover.bmp
  • res/Login/IMButton_Normal.bmp
  • res/Login/Thumbs.db
  • res/TabBg.bmp
  • res/Thumbs.db
  • res/bigddz.ico
  • res/btnclose.bmp
  • res/btnmax.bmp
  • res/btnmin.bmp
  • res/btnrestore.bmp
  • res/button1.bmp
  • res/button2.bmp
  • res/button3.bmp
  • res/button4.bmp
  • res/button5.bmp
  • res/button6.bmp
  • res/end.bmp
  • res/hs.bmp
  • res/map.bmp
  • res/music/pass.wav
  • res/music/pass1.wav
  • res/music/run.wav
  • res/music/select.wav
  • res/music/start.wav
  • res/music/throw.wav
  • res/music/win.wav
  • res/score.bmp
  • res/smallddz.ico
  • res/span.bmp
  • res/start.bmp
  • res/tablecenter.bmp
  • res/topLeft.bmp
  • res/topMiddleLeft.bmp
  • res/topMiddleMiddle.bmp
  • res/topMiddleRight.bmp
  • res/topRight.bmp
  • res/δ-1.bmp
  • res/δ-2.bmp
  • res/δ-3.bmp
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp