General

  • Target

    04ab7b957db5a9bf94ee94826d7aa7e2_JaffaCakes118

  • Size

    11.4MB

  • MD5

    04ab7b957db5a9bf94ee94826d7aa7e2

  • SHA1

    a295dbb72daef14b9ba9caa55010133209d8bbac

  • SHA256

    8c6d85faf8dd4e822e4c4a6b3ee364d8adc292dabac7eb3e0c2bd6d9b4084dc9

  • SHA512

    72e0c422116454e5eaf626ecf1c24ddd38c6ba02b109d9cc2aaf1713be0af15ec1676b1f74c30ea9e9f014f07c5428a87d217498d14d57b2cbeec1d423d49041

  • SSDEEP

    196608:mGdXndhwglQJBDGdnvKbfJ/zfQN8KFGQJ+07mfyePuxbOM/3pu/ikl:mEdGub9SVQN8Kb6aGu0M/3ul

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 4 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • 04ab7b957db5a9bf94ee94826d7aa7e2_JaffaCakes118
    .rar
  • 下载软件_免费下载单机游戏_手机游戏下载大全_psp游戏_下载快播_九号塔下载.url
    .url
  • 九号塔下载说明.txt
  • 单开1209A/TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    e0cb36c66e5c120ef20ebc4f30366345


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 单开1209A/cfgdll.dll
    .dll windows:4 windows x86 arch:x86

    3d5f56d94d940d17985002ac8d7d1179


    Code Sign

    Headers

    Imports

    Sections

  • 单开1209A/plugin/BGKM5.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 单开1209A/plugin/BGKM6.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 单开1209A/plugin/CJY.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 单开1209A/plugin/CJYYZ.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    865e957ed8f39726365d05e486659545


    Headers

    Imports

    Exports

    Sections

  • 单开1209A/plugin/FILE.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    a10a0592e6925a16bb3205010b141edd


    Headers

    Imports

    Exports

    Sections

  • 单开1209A/plugin/MEDIA.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    ad4a40c665cadb0f107e26d05c0debd6


    Headers

    Imports

    Exports

    Sections

  • 单开1209A/plugin/MSG.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    57aad26ca686d6b6792d67b488197bb4


    Headers

    Imports

    Exports

    Sections

  • 单开1209A/plugin/SYS.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    8942c3e9159ff5e44b99b3b05f222dbe


    Headers

    Imports

    Exports

    Sections

  • 单开1209A/plugin/WINDOW.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    893c7528170b94ff6bcdcb8bb8bf6e0d


    Headers

    Imports

    Exports

    Sections

  • 单开1209A/plugin/cjyht.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 单开1209A/uservar.ini
  • 单开1209A/传奇3.小助手辅助v1209A.exe
    .exe windows:4 windows x86 arch:x86

    49c5ff6514fe048918a47d3f7b336d1a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 多开1211A/TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    e0cb36c66e5c120ef20ebc4f30366345


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 多开1211A/传奇3.小助手辅助多开版v1211A.exe
    .exe windows:4 windows x86 arch:x86

    49c5ff6514fe048918a47d3f7b336d1a


    Code Sign

    Headers

    Imports

    Exports

    Sections