General

  • Target

    413065433a56fe9fb0072e754dd295d9_JaffaCakes118

  • Size

    10.3MB

  • MD5

    413065433a56fe9fb0072e754dd295d9

  • SHA1

    af0ea91b07508ad1978add6ef35ad28c4590dddc

  • SHA256

    12d44da32acc668347548ca3face4b13705bb65186c94fdbaa077078c6df747c

  • SHA512

    07ff77f63139333816ad68ddddc0070ac266efedee3aa27ff1af2303d4a975e221e94404511deee84033f9b2b346f827f27c6c6e9e3f0b51132edb714a872a29

  • SSDEEP

    196608:IL6cwhqE7JhOI0r3kwISZJjzsD+DQxVVhCAf+fsMioS6Ew1AZdAEI:IL6cHWOIQ3JxYD4DfsMioSfS8dAEI

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 413065433a56fe9fb0072e754dd295d9_JaffaCakes118
    .rar
  • Microsoft.VC90.CRT.manifest
    .xml
  • Microsoft.VC90.DebugCRT.manifest
    .xml
  • alleg42.dll
    .dll windows:5 windows x86 arch:x86

    d54748a733d7ea994f6d4fe2b3db17ba


    Headers

    Imports

    Exports

    Sections

  • collision.exe
    .exe windows:5 windows x86 arch:x86

    ae2de32cdd67edde50f2e2c6d619429a


    Headers

    Imports

    Sections

  • custom.ini
  • fmod.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • game_link_set.ini
  • msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • msvcm90d.dll
    .dll windows:5 windows x86 arch:x86

    e0d43b484cdd4387f620246ca81a667e


    Headers

    Imports

    Exports

    Sections

  • msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp90d.dll
    .dll windows:5 windows x86 arch:x86

    34e90a6eba47adfd44a08ae3e4e82158


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr90d.dll
    .dll windows:5 windows x86 arch:x86

    1b75f09349f79ed0ac2dc349d0d4d0ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • set.ini
  • source/author.tga
  • source/author_b.bmp
  • source/author_b_check.bmp
  • source/author_check.bmp
  • source/background.bmp
  • source/connect.bmp
  • source/connect_off.bmp
  • source/game_link.bmp
  • source/hand.bmp
  • source/help.tga
  • source/help_b.bmp
  • source/help_b_check.bmp
  • source/help_check.bmp
  • source/hit.bmp
  • source/ip_wrong.bmp
  • source/listen.bmp
  • source/mou.bmp
  • source/number.bmp
  • source/off_link.bmp
  • source/other_put_well.bmp
  • source/playback.bmp
  • source/post.bmp
  • source/put_well.bmp
  • source/put_well_check.bmp
  • source/quick.bmp
  • source/quick_check.bmp
  • source/save_formation.bmp
  • source/save_formation_check.bmp
  • source/select_this.bmp
  • source/sound/abandon_ball.mp3
  • source/sound/ball_collision.wav
  • source/sound/ball_fall.wav
  • source/sound/boundary_collision.wav
  • source/sound/boundary_collision_in.wav
  • source/sound/button.wav
  • source/sound/force.wav
  • source/sound/forecast_select_ball.wav
  • source/sound/game_over_no_win.mp3
  • source/sound/game_over_win.mp3
  • source/sound/main.mp3
  • source/sound/off.mp3
  • source/sound/play.wav
  • source/sound/select_ball.wav
  • source/sound/win.wav
  • source/sound/wonderful.wav
  • source/sound/wonderful_o.wav
  • source/sound_switch.bmp
  • source/sound_switch_check.bmp
  • source/sound_switch_mute.bmp
  • source/sound_switch_mute_check.bmp
  • source/start.bmp
  • source/start_check.bmp
  • source/wait_other_hit.bmp
  • source/wait_other_start.bmp
  • source/win.bmp
  • source/新云软件.url
    .url
  • update.exe
    .exe windows:5 windows x86 arch:x86

    96bd7d424fcd6ca72f9f904b3ec00440


    Headers

    Imports

    Sections

  • 关于我们.jpg
    .jpg
  • 帮助.jpg
    .jpg
  • 查询对外ip.url
  • 桌足博客.url
  • 联机方法.txt