General

  • Target

    5c37d6b0282505295521d4670281879e_JaffaCakes118

  • Size

    9.0MB

  • MD5

    5c37d6b0282505295521d4670281879e

  • SHA1

    a1fb9ca32f575b56a415f648d3718e3326ca4ad0

  • SHA256

    48ea4e430dd99815b3e9b6e743b9cc1e05308eb705b5ef1bae98657ab05721db

  • SHA512

    a327084acc84a3acf4f7f2493a493b89229b31ca5fb2adb5ed9a784b89832024b7608cc9cb7aad6e86f59c0887b8c02cccfd7b5bf406f8d05ed8a89bb9386375

  • SSDEEP

    196608:y0iTxaA3cOtpn8/hZQiN/0HbyyEYtpkW2jRBFQn1pzKhtvhX6:DitaA3tpn8kiR67Ebf1QzzUD6

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 5c37d6b0282505295521d4670281879e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SMPROGRAMS/ݵ/.lnk
    .lnk
  • BonniesBookstore.exe
    .exe windows:4 windows x86 arch:x86

    f8c5b595548b7104775e97bca43caf5b


    Code Sign

    Headers

    Imports

    Sections

  • Graphics/Arrows.png
    .png
  • Graphics/Arrows_ims.txt
  • Graphics/BookComplete.jpg
    .jpg
  • Graphics/BookComplete_Matte.png
    .png
  • Graphics/Borders.png
    .png
  • Graphics/Borders_ims.txt
  • Graphics/ChapterComplete.jpg
    .jpg
  • Graphics/ChapterComplete_Matte.png
    .png
  • Graphics/Credits.jpg
    .jpg
  • Graphics/Help_1.jpg
    .jpg
  • Graphics/Help_2.jpg
    .jpg
  • Graphics/Help_3.jpg
    .jpg
  • Graphics/Help_Arrow.png
    .png
  • Graphics/Help_Arrow2.png
    .png
  • Graphics/Help_Left_Button_Down.png
    .png
  • Graphics/Help_Left_Button_Hover.png
    .png
  • Graphics/Help_Left_Button_Normal.png
    .png
  • Graphics/Help_Right_Button_Down.png
    .png
  • Graphics/Help_Right_Button_Hover.png
    .png
  • Graphics/Help_Right_Button_Normal.png
    .png
  • Graphics/HighScore_Buttons.png
    .png
  • Graphics/HighScore_Buttons_ims.txt
  • Graphics/HighScores.jpg
    .jpg
  • Graphics/LetterInvalid.png
    .png
  • Graphics/Level_Thumbs.jpg
    .jpg
  • Graphics/Level_Thumbs_Frame.png
    .png
  • Graphics/Level_Thumbs_ims.txt
  • Graphics/LogoPart_Crayon.jpg
    .jpg
  • Graphics/LogoPart_Games.jpg
    .jpg
  • Graphics/LogoPart_Letter_0.png
    .png
  • Graphics/LogoPart_Letter_1.png
    .png
  • Graphics/LogoPart_Letter_2.png
    .png
  • Graphics/LogoPart_Letter_3.png
    .png
  • Graphics/LogoPart_Letter_4.png
    .png
  • Graphics/LogoPart_Letter_5.png
    .png
  • Graphics/LogoPart_Letter_6.png
    .png
  • Graphics/LogoPart_Letter_7.png
    .png
  • Graphics/LogoPart_Letter_8.png
    .png
  • Graphics/LogoPart_TM.jpg
    .jpg
  • Graphics/Options.jpg
    .jpg
  • Graphics/Options_Button_Up_Down.png
    .png
  • Graphics/Options_Button_Up_Down_ims.txt
  • Graphics/Options_Buttons.jpg
    .jpg
  • Graphics/Options_Buttons_Matte.png
    .png
  • Graphics/Options_Buttons_ims.txt
  • Graphics/Options_Matte.png
    .png
  • Graphics/Options_Slider.png
    .png
  • Graphics/Particles.png
    .png
  • Graphics/Particles_ims.txt
  • Graphics/PopCap.jpg
    .jpg
  • Graphics/PreLevel.jpg
    .jpg
  • Graphics/PreLevel_Arm_Turn_1.jpg
    .jpg
  • Graphics/PreLevel_Arm_Turn_2.jpg
    .jpg
  • Graphics/PreLevel_Blink_1.png
    .png
  • Graphics/PreLevel_Blink_2.png
    .png
  • Graphics/PreLevel_Carriage_1.png
    .png
  • Graphics/PreLevel_Carriage_2.png
    .png
  • Graphics/PreLevel_Head_Turn.jpg
    .jpg
  • Graphics/PreLevel_Paper_1.png
    .png
  • Graphics/PreLevel_Paper_2.png
    .png
  • Graphics/PreLevel_Smile_1.png
    .png
  • Graphics/PreLevel_Smile_2.png
    .png
  • Graphics/PreLevel_TypewriterFront.png
    .png
  • Graphics/PreLevel_TypewriterWheels_1.png
    .png
  • Graphics/PreLevel_TypewriterWheels_2.png
    .png
  • Graphics/Register.jpg
    .jpg
  • Graphics/Register_Buttons.jpg
    .jpg
  • Graphics/Register_Buttons_Matte.png
    .png
  • Graphics/Register_Buttons_ims.txt
  • Graphics/SD_Bonnie.jpg
    .jpg
  • Graphics/SD_Bonnie_Matte.png
    .png
  • Graphics/SD_Buttons.jpg
    .jpg
  • Graphics/SD_Buttons_Matte.png
    .png
  • Graphics/SD_Buttons_ims.txt
  • Graphics/SD_Notepad.jpg
    .jpg
  • Graphics/SD_Notepad_Matte.png
    .png
  • Graphics/SL_Blocker.png
    .png
  • Graphics/SL_Qu.png
    .png
  • Graphics/SL_SuperWildCard.png
    .png
  • Graphics/SL_SuperWildCard_Outline.png
    .png
  • Graphics/SL_WildCard.png
    .png
  • Graphics/Setup.jpg
    .jpg
  • Graphics/Setup_Blink.jpg
    .jpg
  • Graphics/Setup_Blink_ims.txt
  • Graphics/Setup_Books.jpg
    .jpg
  • Graphics/Setup_Books_1_Matte.png
    .png
  • Graphics/Setup_Books_2_Matte.png
    .png
  • Graphics/Setup_Books_3_Matte.png
    .png
  • Graphics/Setup_Books_4_Matte.png
    .png
  • Graphics/Setup_Books_5_Matte.png
    .png
  • Graphics/Setup_Leaf.png
    .png
  • Graphics/Setup_Leaf_ims.txt
  • Graphics/Setup_Sign.jpg
    .jpg
  • Graphics/Setup_Sign_Matte.png
    .png
  • Graphics/Setup_Sign_ims.txt
  • Graphics/Setup_Wave.jpg
    .jpg
  • Graphics/Setup_Wave_ims.txt
  • Graphics/Story_1A.jpg
    .jpg
  • Graphics/Story_1B.jpg
    .jpg
  • Graphics/Story_1C.jpg
    .jpg
  • Graphics/Story_2A.jpg
    .jpg
  • Graphics/Story_Button_Down.png
    .png
  • Graphics/Story_Button_Hover.png
    .png
  • Graphics/Story_Button_Normal.png
    .png
  • Graphics/Summary_Background.jpg
    .jpg
  • Graphics/Summary_Matte.png
    .png
  • Graphics/Summary_aliceinwonderland.jpg
    .jpg
  • Graphics/Summary_diddlediddle.jpg
    .jpg
  • Graphics/Summary_frogprince.jpg
    .jpg
  • Graphics/Summary_gullivers_travels.jpg
    .jpg
  • Graphics/Summary_haretortoise.jpg
    .jpg
  • Graphics/Summary_littlemissmuffet.jpg
    .jpg
  • Graphics/Summary_musiciansofbremen.jpg
    .jpg
  • Graphics/Summary_princepauper.jpg
    .jpg
  • Graphics/Summary_stonesoup.jpg
    .jpg
  • Graphics/Summary_thelionandthemouse.jpg
    .jpg
  • Graphics/Summary_thumbelina.jpg
    .jpg
  • Graphics/Summary_uglyduckling.jpg
    .jpg
  • Graphics/WindowIcon.png
    .png
  • Graphics/aliceinwonderland_01.jpg
    .jpg
  • Graphics/aliceinwonderland_02.jpg
    .jpg
  • Graphics/aliceinwonderland_03.jpg
    .jpg
  • Graphics/aliceinwonderland_04.jpg
    .jpg
  • Graphics/aliceinwonderland_05.jpg
    .jpg
  • Graphics/diddlediddle_01.jpg
    .jpg
  • Graphics/diddlediddle_02.jpg
    .jpg
  • Graphics/diddlediddle_03.jpg
    .jpg
  • Graphics/diddlediddle_04.jpg
    .jpg
  • Graphics/frogprince_01.jpg
    .jpg
  • Graphics/frogprince_02.jpg
    .jpg
  • Graphics/frogprince_03.jpg
    .jpg
  • Graphics/frogprince_04.jpg
    .jpg
  • Graphics/game_UI_01.png
    .png
  • Graphics/game_UI_02.png
    .png
  • Graphics/game_UI_button_background.png
    .png
  • Graphics/game_UI_button_background_2.png
    .png
  • Graphics/game_button_down.png
    .png
  • Graphics/game_button_hover.png
    .png
  • Graphics/game_button_menu_down.png
    .png
  • Graphics/game_button_menu_hover.png
    .png
  • Graphics/game_button_menu_normal.png
    .png
  • Graphics/game_button_normal.png
    .png
  • Graphics/game_button_outline.png
    .png
  • Graphics/game_lock.png
    .png
  • Graphics/game_lock_ims.txt
  • Graphics/game_tiles.png
    .png
  • Graphics/game_tiles_ims.txt
  • Graphics/gullivers_travels_01.jpg
    .jpg
  • Graphics/gullivers_travels_02.jpg
    .jpg
  • Graphics/gullivers_travels_03.jpg
    .jpg
  • Graphics/gullivers_travels_04.jpg
    .jpg
  • Graphics/haretortoise_01.jpg
    .jpg
  • Graphics/haretortoise_02.jpg
    .jpg
  • Graphics/haretortoise_03.jpg
    .jpg
  • Graphics/haretortoise_04.jpg
    .jpg
  • Graphics/littlemissmuffet_01.jpg
    .jpg
  • Graphics/littlemissmuffet_02.jpg
    .jpg
  • Graphics/littlemissmuffet_03.jpg
    .jpg
  • Graphics/littlemissmuffet_04.jpg
    .jpg
  • Graphics/musiciansofbremen_01.jpg
    .jpg
  • Graphics/musiciansofbremen_02.jpg
    .jpg
  • Graphics/musiciansofbremen_03.jpg
    .jpg
  • Graphics/musiciansofbremen_04.jpg
    .jpg
  • Graphics/princepauper_01.jpg
    .jpg
  • Graphics/princepauper_02.jpg
    .jpg
  • Graphics/princepauper_03.jpg
    .jpg
  • Graphics/princepauper_04.jpg
    .jpg
  • Graphics/stonesoup_01.jpg
    .jpg
  • Graphics/stonesoup_02.jpg
    .jpg
  • Graphics/stonesoup_03.jpg
    .jpg
  • Graphics/stonesoup_04.jpg
    .jpg
  • Graphics/thelionandthemouse_01.jpg
    .jpg
  • Graphics/thelionandthemouse_02.jpg
    .jpg
  • Graphics/thelionandthemouse_03.jpg
    .jpg
  • Graphics/thelionandthemouse_04.jpg
    .jpg
  • Graphics/thumbelina_01.jpg
    .jpg
  • Graphics/thumbelina_02.jpg
    .jpg
  • Graphics/thumbelina_03.jpg
    .jpg
  • Graphics/thumbelina_04.jpg
    .jpg
  • Graphics/thumbelina_05.jpg
    .jpg
  • Graphics/timer.png
    .png
  • Graphics/timer_ims.txt
  • Graphics/uglyduckling_01.jpg
    .jpg
  • Graphics/uglyduckling_02.jpg
    .jpg
  • Graphics/uglyduckling_03.jpg
    .jpg
  • Graphics/uglyduckling_04.jpg
    .jpg
  • SDL.dll
    .dll windows:4 windows x86 arch:x86

    73640ce0e4c080325c8e5c5e5311a16e


    Headers

    Imports

    Exports

    Sections

  • SDL_image.dll
    .dll windows:4 windows x86 arch:x86

    c2e5c078b6d2a33ea6abcb472bef351c


    Headers

    Imports

    Exports

    Sections

  • SavedGames/General_Preferences.cfg
  • SavedGames/XiaZaiBa.GAM
  • Sound/AddPoint.ogg
  • Sound/Bell.ogg
  • Sound/Blocker_Fallout.ogg
  • Sound/Button2_Press.ogg
  • Sound/Button2_Release.ogg
  • Sound/Button_Press.ogg
  • Sound/Button_Release.ogg
  • Sound/Cancel.ogg
  • Sound/CashRegister.ogg
  • Sound/Checkbox_Press.ogg
  • Sound/Error.ogg
  • Sound/GameOver.ogg
  • Sound/Level_Up.ogg
  • Sound/Level_Up_Quick.ogg
  • Sound/Logo.ogg
  • Sound/PaperButton_Press.ogg
  • Sound/PaperButton_Release.ogg
  • Sound/Place_01.ogg
  • Sound/Place_02.ogg
  • Sound/Place_03.ogg
  • Sound/Scramble.ogg
  • Sound/Screen_Transition_01.ogg
  • Sound/Screen_Transition_02.ogg
  • Sound/Screen_Transition_03.ogg
  • Sound/Screen_Transition_04.ogg
  • Sound/Word_03.ogg
  • Sound/Word_04.ogg
  • Sound/Word_05.ogg
  • Sound/Word_06.ogg
  • Sound/music.oxm
  • Sound/type_01.ogg
  • Sound/type_02.ogg
  • Sound/type_03.ogg
  • Sound/type_space_01.ogg
  • Sound/typewriter_carriagereturn_01.ogg
  • data/Bonnie.pak
  • data/Dictionary.txt
  • data/Language.txt
  • data/Portal.cfg
  • fmod.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • jpeg.dll
    .dll windows:4 windows x86 arch:x86

    74e324eccfe70a297c0ff15f8230baf4


    Headers

    Imports

    Exports

    Sections

  • libpng13.dll
    .dll windows:4 windows x86 arch:x86

    c44d1e29f03195f89662f06d6bd14fb5


    Headers

    Imports

    Exports

    Sections

  • license.txt
  • properties/partner.xml
  • properties/partner.xml.sig
  • readme.html
    .html
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • zlib1.dll
    .dll windows:4 windows x86 arch:x86

    2d3ee679b3fa7146dcc780f76415ad2e


    Headers

    Imports

    Exports

    Sections

  • .lnk
    .lnk