General

  • Target

    7134f183e714676906e832d0490e92ca_JaffaCakes118

  • Size

    7.4MB

  • MD5

    7134f183e714676906e832d0490e92ca

  • SHA1

    1e0b13b074ce431171ec853c6f8eeb0d4ddcf656

  • SHA256

    fa58d64d372569edc99d80484e9819e184fad39cb3d9a57c0a9a0c2e6096f5a2

  • SHA512

    cba85303b97fddb7c63a9057fe706ef312afa028c6b862a8153e83fd047841f2cf849ffc81f909488d75d18aaa331b28667ec92e220d172c0e491abe58a1cdb0

  • SSDEEP

    196608:vEotz8tdaxrmrUCW1C163hSGPKcWjcweuqKOl:vhxrmcC+8GCcTeIl

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 7134f183e714676906e832d0490e92ca_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/DefCamSetup-English.ini
  • $PLUGINSDIR/DefCamSetup-Simpchinese.ini
  • $PLUGINSDIR/DefCamSetup-Tradchinese.ini
  • $PLUGINSDIR/DefCamSetup.dll
    .dll windows:4 windows x86 arch:x86

    0843fc35a546e4ff989f2c0b0f345e69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GGExit.exe
    .exe windows:4 windows x86 arch:x86

    eedec5ce5c99c872622f21ddf098d820


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    295fc8c35dee88b924b0f6bafc807c6c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISArray.dll
    .dll windows:4 windows x86 arch:x86

    91596216b99c852af6e0fb1fe8192de4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsRandom.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Dance/5BO_BSHOW.ico
  • Dance/AudioCapture.dll
    .dll windows:4 windows x86 arch:x86

    762b13b876a54f52c249939b179810a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/AudioCodec1.dll
    .dll windows:4 windows x86 arch:x86

    f8410c3dce8c223672198bb8cd34c429


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/AudioCodec2.dll
    .dll windows:4 windows x86 arch:x86

    f6b9b7f76f67521152057b9e22b48c89


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/AudioCodec3.dll
    .dll windows:4 windows x86 arch:x86

    73b8553e8adb7e658ef50d0961c5b298


    Code Sign

    Headers

    Imports

    Sections

  • Dance/AudioDecodec3.dll
    .dll windows:4 windows x86 arch:x86

    fb0d04ce49d8c7c6a22f3824469aaf95


    Code Sign

    Headers

    Imports

    Sections

  • Dance/ChatHall.exe
    .exe windows:4 windows x86 arch:x86

    b906cbfa4ab59f937c7e4f8e9febaff7


    Headers

    Imports

    Sections

  • Dance/ChatHall.ini
  • Dance/ChatRoom/ChatRoomClient.dll
    .dll windows:4 windows x86 arch:x86

    782413a3e05168360f8dc444a2dd3d26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/ChatRoomUI.dll
    .dll windows:4 windows x86 arch:x86

    a33ac7a2aa85a20347d6b9cd3ac85abd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/Config.ini
  • Dance/ChatRoom/RoomRadioMgr.dll
    .dll windows:4 windows x86 arch:x86

    560d51bbe32d3ad6c197407108eeaa9c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/Skin/2010beta1ChatRoom.ggs
  • Dance/ChatRoom/Skin/2010beta2RoomRadioMgr.ggs
  • Dance/ChatRoom/Skin/Alarm.png
    .png
  • Dance/ChatRoom/Skin/DefFace.bmp
  • Dance/ChatRoom/Skin/PrivteMic.bmp
  • Dance/ChatRoom/Skin/VideoBack.bmp
  • Dance/ChatRoom/Skin/VideoBack2.bmp
  • Dance/ChatRoom/Skin/WndBack.bmp
  • Dance/ChatRoom/Skin/bg1.jpg
    .jpg
  • Dance/ChatRoom/Skin/wedhead.jpg
    .jpg
  • Dance/ChatRoom/UIToolTip.dll
    .dll windows:4 windows x86 arch:x86

    04897ae99bc29616991912ca68521429


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/VcrMediaLib.dll
    .dll windows:4 windows x86 arch:x86

    408879edc14569be9924251c0fc7dfd9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/VolumeCtrl.dll
    .dll windows:5 windows x86 arch:x86

    9f214f5ff27e25a36acb6f280f58f6be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/VolumeCtrlForVista.dll
    .dll windows:5 windows x86 arch:x86

    c7af61f9a000f0b992891a89efd630f8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/data/FlowerData.dat
  • Dance/ChatRoom/plug_folder_focus.bmp
  • Dance/ChatRoom/plug_folder_normal.bmp
  • Dance/ChatRoomUI.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    135cc4765d434b7922f2bb51b73648fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/DnsSession.dll
    .dll windows:4 windows x86 arch:x86

    43d17f529f26f51b6f12b182d9cc0d38


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Downloader.exe
    .exe windows:4 windows x86 arch:x86

    9c1807b39fbc34cab8dda6752d922a9f


    Code Sign

    Headers

    Imports

    Sections

  • Dance/EncWmv.dll
    .dll windows:4 windows x86 arch:x86

    5b3f9a2956f683d60eb5c773dd4ed6f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/EquipCenter.dll
    .dll windows:4 windows x86 arch:x86

    d8d7f4527fc8302dfe91ea7df3718db5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/GameMediaLib.dll
    .dll windows:4 windows x86 arch:x86

    89dd1f67cbc9f7f926dedce3b1b30bcb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ImageOle.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    18e201c66fb36f0c34f99d047daacbc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/MFC71u.dll
    .dll windows:4 windows x86 arch:x86

    b3fbf4599c17e9bc7ccae6518bf0f868


    Code Sign

    Headers

    Imports

    Sections

  • Dance/Mp4Maker.exe
    .exe windows:4 windows x86 arch:x86

    1f68c90cff8a30b4c0e3f92a4f23f231


    Code Sign

    Headers

    Imports

    Sections

  • Dance/OemIcon.ico
  • Dance/ResCenter.dll
    .dll windows:4 windows x86 arch:x86

    01e5253a44173e5f467d225298f22084


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/RtpStack.DLL
    .dll windows:4 windows x86 arch:x86

    784794bd29e6f793431c8af904f233f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Skin/2010beta1DownLoader.ggs
  • Dance/Skin/2010beta1EquipCenterSkin.ggs
  • Dance/Skin/2010beta1Skin.ggs
  • Dance/Skin/2010beta1Skin_0.ggs
  • Dance/Skin/2010beta1UpdateSkin.ggs
  • Dance/Skin/2010beta1UserInfoSkin.ggs
  • Dance/Skin/Alarm.png
    .png
  • Dance/Skin/DefFace.bmp
  • Dance/Skin/DefFace_16.bmp
  • Dance/Skin/DefFace_21.bmp
  • Dance/Skin/DefSendedStarGift.gif
    .gif
  • Dance/Skin/DefStarLevel.bmp
  • Dance/Skin/DefaultCar.gif
    .gif
  • Dance/Skin/GiftButtonBK.bmp
  • Dance/Skin/VideoBack.bmp
  • Dance/Skin/WndBack.bmp
  • Dance/Skin/default_female.png
    .png
  • Dance/Skin/default_male.png
    .png
  • Dance/Skin/jilv.jpg
    .jpg
  • Dance/Skin/login.gif
    .gif
  • Dance/Skin/progressbar.gif
    .gif
  • Dance/Thumbs.db
  • Dance/UIToolTip.dll
    .dll windows:4 windows x86 arch:x86

    0b5fe4eb2b7be03512291391bd4a08c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Update.exe
    .exe windows:4 windows x86 arch:x86

    271cb0154fc9f39f8dedc9518fb189bf


    Code Sign

    Headers

    Imports

    Sections

  • Dance/UserInfoCenter.dll
    .dll windows:4 windows x86 arch:x86

    e1f67689fcf55f0a712f39e741f1c455


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/VideoCapture.dll
    .dll windows:4 windows x86 arch:x86

    a8638fcc38ef377834e80577f30abd68


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/VideoCodec1.dll
    .dll windows:4 windows x86 arch:x86

    25a7dddc6585fb86545c4455570f7566


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/VideoDecode2.dll
    .dll windows:4 windows x86 arch:x86

    a4bacaf55e89f395e2a6d80f0fb45bfb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/VideoEncode2.dll
    .dll windows:4 windows x86 arch:x86

    3b43ecc47d73f03f9ca67aaf55bcbcc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/WebGame/Category.bmp
  • Dance/WebGame/Config.ini
  • Dance/data/IllWord.dat
  • Dance/data/Update.dat
  • Dance/data/common.dat
  • Dance/gdiplus.dll
    .dll windows:5 windows x86 arch:x86

    7941976a82dd7ff8b1a2ea069878fab3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst9.exe.nsis