General

  • Target

    8712286cf8191dafea6e8789e563dcb0_JaffaCakes118

  • Size

    7.5MB

  • MD5

    8712286cf8191dafea6e8789e563dcb0

  • SHA1

    d5e234ef76e2707c38ba1d91c0c4ff96d11dc64a

  • SHA256

    7e653ad2e5e859dd3a363f22e8bf5477ab864a2fcf2b42323bdbe6748a762596

  • SHA512

    564fe5712a8895c62bc5c08a3a219e44c75258330fef46264a47b126cad2a2caab46eb7e09da6b7e32a0fd0a8368f414792bc0a1ee529c03b694b0d86d18ffea

  • SSDEEP

    196608:tY+vgG4q8Xg1gCaJTRPGElTOjuWQP5KiskLFtblhtdToRhJasnF:tYkKygCogaTOjuWiLFtbjMfjnF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 34 IoCs

    Checks for missing Authenticode signature.

Files

  • 8712286cf8191dafea6e8789e563dcb0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    711c893e4d8189fd14b6563a4e35e663


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    946eb0a1e85c9ade4acaf634eb5a64f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • AVManage.dll
    .dll windows:4 windows x86 arch:x86

    91166ad13f46a6d4215f00e5ac80e029


    Headers

    Imports

    Exports

    Sections

  • Avatar.dll
    .dll windows:4 windows x86 arch:x86

    47976afcb3a1001708120cd617845153


    Headers

    Imports

    Exports

    Sections

  • BBMsg.dll
    .dll windows:4 windows x86 arch:x86

    b52fc45c4419ffecf7a426bbb983c753


    Headers

    Imports

    Exports

    Sections

  • CardRes.dll
    .dll windows:4 windows x86 arch:x86

    47427df2e6830aa66d3fcdcbc5921e73


    Headers

    Imports

    Exports

    Sections

  • ClientCore25.dll
    .dll windows:4 windows x86 arch:x86

    66007461d900b502f9f6ac5fa19b9d6f


    Headers

    Imports

    Exports

    Sections

  • CrashReporter.exe
    .exe windows:4 windows x86 arch:x86

    f02700aa8f475fc55b2a2d90fc31439f


    Headers

    Imports

    Sections

  • DTDJ_1.exe
    .exe windows:5 windows x86 arch:x86

    4dbc5d08df28b8f55d5238d42ee67fa8


    Headers

    Imports

    Sections

  • DllTunnel.dll
    .dll windows:4 windows x86 arch:x86

    b79063e19977f3d47ab5bbc857c2e7b5


    Headers

    Imports

    Exports

    Sections

  • JuDown.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    95c2677f862a8968316f0871c244e6ea


    Headers

    Imports

    Exports

    Sections

  • MFC71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • Main_dtdj.ini
  • RakNet.dll
    .dll windows:4 windows x86 arch:x86

    aded0736c9b77017e301c9d033b32968


    Headers

    Imports

    Exports

    Sections

  • ResList.ini
  • UpdateHall.exe
    .exe windows:4 windows x86 arch:x86

    fdb9cf106ec7a0403355c68f805f29d8


    Headers

    Imports

    Sections

  • WordLib.dll
    .dll windows:4 windows x86 arch:x86

    035228e14c8cde179803e6a8ed13e98a


    Headers

    Imports

    Exports

    Sections

  • Zephyr.dll
    .dll windows:4 windows x86 arch:x86

    95c38956c3b1f1148821ce4c683436fa


    Headers

    Imports

    Exports

    Sections

  • ZephyrMFC.dll
    .dll windows:4 windows x86 arch:x86

    61453a0733a91c16c340c0d83a0bf817


    Headers

    Imports

    Exports

    Sections

  • ZephyrNet21.dll
    .dll windows:4 windows x86 arch:x86

    37a6c49c720f2e61f52e75e845371264


    Headers

    Imports

    Exports

    Sections

  • avatar/0.png
    .jpg
  • avatar/1.png
    .png
  • card/Card_1024.zpc
  • card/Card_800.zpc
  • chat/Action.txt
  • chat/Chat.dat
    .html
  • chat/Face.txt
  • chat/images/00.gif
    .gif
  • chat/images/01.gif
    .gif
  • chat/images/02.gif
    .gif
  • chat/images/03.gif
    .gif
  • chat/images/04.gif
    .gif
  • chat/images/05.gif
    .gif
  • chat/images/06.gif
    .gif
  • chat/images/07.gif
    .gif
  • chat/images/08.gif
    .gif
  • chat/images/09.gif
    .gif
  • chat/images/10.gif
    .gif
  • chat/images/11.gif
    .gif
  • chat/images/12.gif
    .gif
  • chat/images/13.gif
    .gif
  • chat/images/14.gif
    .gif
  • chat/images/15.gif
    .gif
  • chat/images/16.gif
    .gif
  • chat/images/17.gif
    .gif
  • chat/images/18.gif
    .gif
  • chat/images/19.gif
    .gif
  • chat/images/20.gif
    .gif
  • chat/images/21.gif
    .gif
  • chat/images/22.gif
    .gif
  • chat/images/23.gif
    .gif
  • chat/images/24.gif
    .gif
  • chat/images/25.gif
    .gif
  • chat/images/26.gif
    .gif
  • chat/images/27.gif
    .gif
  • chat/images/28.gif
    .gif
  • chat/images/29.gif
    .gif
  • chat/images/30.gif
    .gif
  • chat/images/31.gif
    .gif
  • chat/images/32.gif
    .gif
  • chat/images/33.gif
    .gif
  • chat/images/34.gif
    .gif
  • chat/images/35.gif
    .gif
  • chat/images/36.gif
    .gif
  • chat/images/37.gif
    .gif
  • chat/images/38.gif
    .gif
  • chat/images/39.gif
    .gif
  • chat/images/40.gif
    .gif
  • chat/images/41.gif
    .gif
  • chat/images/42.gif
    .gif
  • chat/images/43.gif
    .gif
  • chat/images/44.gif
    .gif
  • chat/images/45.gif
    .gif
  • chat/images/46.gif
    .gif
  • chat/images/47.gif
    .gif
  • chat/images/48.gif
    .gif
  • chat/images/49.gif
    .gif
  • chat/images/50.gif
    .gif
  • chat/images/51.gif
    .gif
  • chat/images/52.gif
    .gif
  • chat/images/53.gif
    .gif
  • chat/images/54.gif
    .gif
  • chat/images/55.gif
    .gif
  • chat/images/56.gif
    .gif
  • chat/images/57.gif
    .gif
  • chat/images/58.gif
    .gif
  • chat/images/59.gif
    .gif
  • chat/images/60.gif
    .gif
  • chat/images/61.gif
    .gif
  • chat/images/62.gif
    .gif
  • chat/images/63.gif
    .gif
  • chat/images/64.gif
    .gif
  • chat/images/65.gif
    .gif
  • chat/images/66.gif
    .gif
  • chat/images/67.gif
    .gif
  • chat/images/68.gif
    .gif
  • chat/images/69.gif
    .gif
  • chat/images/70.gif
    .gif
  • chat/images/71.gif
    .gif
  • chat/images/72.gif
    .gif
  • chat/images/73.gif
    .gif
  • chat/images/74.gif
    .gif
  • chat/images/75.gif
    .gif
  • chat/images/76.gif
    .gif
  • chat/images/77.gif
    .gif
  • chat/images/78.gif
    .gif
  • chat/images/79.gif
    .gif
  • chat/images/80.gif
    .gif
  • chat/images/81.gif
    .gif
  • chat/images/82.gif
    .gif
  • chat/images/83.gif
    .gif
  • chat/images/84.gif
    .gif
  • chat/images/85.gif
    .gif
  • chat/images/86.gif
    .gif
  • chat/images/87.gif
    .gif
  • chat/images/88.gif
    .gif
  • chat/images/89.gif
    .gif
  • chat/images/90.gif
    .gif
  • chat/images/91.gif
    .gif
  • chat/images/92.gif
    .gif
  • chat/images/93.gif
    .gif
  • chat/images/94.gif
    .gif
  • chat/images/95.gif
    .gif
  • chat/images/96.gif
    .gif
  • chat/images/97.gif
    .gif
  • chat/images/98.gif
    .gif
  • chat/images/99.gif
    .gif
  • chat/images/bugle.gif
    .gif
  • chat/images/face.bmp
  • chat/images/gm.bmp
  • chat/mask.zpc
  • chat/msg.htm
    .html .js polyglot
  • client.ini
  • common/adver.bmp
  • common/btn_close.bmp
  • common/btn_min.bmp
  • common/btn_switchleft.bmp
  • common/btn_switchright.bmp
  • common/btntab0.bmp
  • common/btntab1.bmp
  • common/button.bmp
  • common/check.bmp
  • common/default.ini
  • common/dlgframe.bmp
  • common/droparrow.bmp
  • common/experience.txt
  • common/info.bmp
  • common/listarrow.bmp
  • common/listhead.bmp
  • common/logo.bmp
  • common/logo1.bmp
  • common/msgframe.bmp
  • common/progress.bmp
  • common/radio.bmp
  • common/recommend.ini
  • common/separate.bmp
  • common/tablelevel_m.txt
  • common/tablelevel_s.txt
  • common/title.bmp
  • common/title1.bmp
  • hall.exe
    .exe windows:4 windows x86 arch:x86

    f8ce44b8872907b84346ea17776586ad


    Headers

    Imports

    Exports

    Sections

  • hall.ico
  • hall/gameframe/btn_callgm.bmp
  • hall/gameframe/btn_close.bmp
  • hall/gameframe/btn_config.bmp
  • hall/gameframe/btn_exchangejetton.bmp
  • hall/gameframe/btn_exit.bmp
  • hall/gameframe/btn_gamerule.bmp
  • hall/gameframe/btn_hall.bmp
  • hall/gameframe/btn_max.bmp
  • hall/gameframe/btn_min.bmp
  • hall/gameframe/btn_restore.bmp
  • hall/gameframe/btn_roseexchange.bmp
  • hall/gameframe/btn_send.bmp
  • hall/gameframe/btn_strongbox.bmp
  • hall/gameframe/btn_wallet.bmp
  • hall/gameframe/frame.bmp
  • hall/gameframe/gameframe.ini
  • hall/gameframe/mainwnd.bmp
  • hall/gameframe/statusbar.bmp
  • hall/gameframe/userinfo.bmp
  • hall/ghover.cur
  • hall/room/action.bmp
  • hall/room/box.bmp
  • hall/room/btn_add.bmp
  • hall/room/btn_callgm.bmp
  • hall/room/btn_config.bmp
  • hall/room/btn_exchangejetton.bmp
  • hall/room/btn_exit.bmp
  • hall/room/btn_findtable.bmp
  • hall/room/btn_game.bmp
  • hall/room/btn_left.bmp
  • hall/room/btn_leftqueue.bmp
  • hall/room/btn_modifypsw_select.bmp
  • hall/room/btn_modifypsw_unselect.bmp
  • hall/room/btn_propshop.bmp
  • hall/room/btn_queue.bmp
  • hall/room/btn_rechargecard.bmp
  • hall/room/btn_rechargefast.bmp
  • hall/room/btn_rechargenewscorecard.bmp
  • hall/room/btn_rechargeweb.bmp
  • hall/room/btn_right.bmp
  • hall/room/btn_sendpchat.bmp
  • hall/room/btn_strongbox.bmp
  • hall/room/btn_strongbox_in_select.bmp
  • hall/room/btn_strongbox_in_unselect.bmp
  • hall/room/btn_strongbox_out_select.bmp
  • hall/room/btn_strongbox_out_unselect.bmp
  • hall/room/btn_sub.bmp
  • hall/room/btn_wallet.bmp
  • hall/room/btn_wallet_in_select.bmp
  • hall/room/btn_wallet_in_unselect.bmp
  • hall/room/btn_wallet_out_select.bmp
  • hall/room/btn_wallet_out_unselect.bmp
  • hall/room/bugle.bmp
  • hall/room/chatopback.bmp
  • hall/room/face.bmp
  • hall/room/hand.bmp
  • hall/room/listback.bmp
  • hall/room/listicon.bmp
  • hall/room/pchat.ini
  • hall/room/pchatbuttom.bmp
  • hall/room/pchatitle1.bmp
  • hall/room/pchatitle2.bmp
  • hall/room/printscr.bmp
  • hall/room/prop/amulet.bmp
  • hall/room/prop/btn_amulet.bmp
  • hall/room/prop/btn_dscore.bmp
  • hall/room/prop/btn_redbag.bmp
  • hall/room/prop/btn_rose.bmp
  • hall/room/prop/btn_speaker.bmp
  • hall/room/prop/dscore.bmp
  • hall/room/prop/redbag.bmp
  • hall/room/prop/rose.bmp
  • hall/room/prop/speaker.bmp
  • hall/room/propback.bmp
  • hall/room/quene.bmp
  • hall/room/queueback.bmp
  • hall/room/strongbox_back_in.bmp
  • hall/room/strongbox_back_normal.bmp
  • hall/room/strongbox_back_out.bmp
  • hall/room/tablelevel.bmp
  • hall/room/usertips.bmp
  • hall/room/viewframe.bmp
  • hall/room/wallet_back_in.bmp
  • hall/room/wallet_back_normal.bmp
  • hall/room/wallet_back_out.bmp
  • hall/urllist.ini
  • hallpack.txt
  • ijl15.dll
    .dll windows:4 windows x86 arch:x86

    6b540d7d784d97e028bc85e2ab457662


    Headers

    Imports

    Exports

    Sections

  • login/btn_kd1.bmp
  • login/btn_kd2.bmp
  • login/btn_normal1.bmp
  • login/btn_normal2.bmp
  • login/btn_register.bmp
  • login/btn_setproxy.bmp
  • login/dlgframe.bmp
  • login/keyboard.bmp
  • login/keyboard1.bmp
  • login/login.ini
  • login/logo.bmp
  • login/tab1.bmp
  • login/tab2.bmp
  • mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bcd2542f46e742c06cabefff84c7320d


    Headers

    Imports

    Exports

    Sections

  • mfc71u.dll
    .dll windows:4 windows x86 arch:x86

    b3fbf4599c17e9bc7ccae6518bf0f868


    Headers

    Imports

    Sections

  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • msvcrt.dll
    .dll windows:5 windows x86 arch:x86

    1838f96daab97a33395f5dee7b6f4a3c


    Headers

    Imports

    Exports

    Sections

  • olepro32.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    bfbea1910cdffc9fc4cb569cbd816073


    Headers

    Imports

    Exports

    Sections

  • python25.dll
    .dll windows:4 windows x86 arch:x86

    c95ffe1c5c0fb3e98b1b03977ef3bab5


    Headers

    Imports

    Exports

    Sections

  • stlport_vc7146.dll
    .dll windows:4 windows x86 arch:x86

    34cc24c17a4f32fe442841daa36b7643


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • winmain/WndMain.ini
  • winmain/btn_Max.bmp
  • winmain/btn_Min.bmp
  • winmain/btn_accountbind.bmp
  • winmain/btn_avatar.bmp
  • winmain/btn_bbs.bmp
  • winmain/btn_brush.bmp
  • winmain/btn_changeskin.bmp
  • winmain/btn_close.bmp
  • winmain/btn_exchangejetton.bmp
  • winmain/btn_exit.bmp
  • winmain/btn_expchangemoney.bmp
  • winmain/btn_extend.bmp
  • winmain/btn_fillmoney.bmp
  • winmain/btn_gamelist1.bmp
  • winmain/btn_gamelist2.bmp
  • winmain/btn_history.bmp
  • winmain/btn_login.bmp
  • winmain/btn_matchlist1.bmp
  • winmain/btn_matchlist2.bmp
  • winmain/btn_presentjetton.bmp
  • winmain/btn_prop.bmp
  • winmain/btn_releasebind.bmp
  • winmain/btn_restore.bmp
  • winmain/btn_safebox.bmp
  • winmain/btn_selectmodule.bmp
  • winmain/btn_servicelist1.bmp
  • winmain/btn_servicelist2.bmp
  • winmain/btn_strongbox.bmp
  • winmain/btn_unselectmodule.bmp
  • winmain/btn_webmain.bmp
  • winmain/frame.bmp
  • winmain/levelchar.bmp
  • winmain/levelprocess.bmp
  • winmain/mainwnd.bmp
  • winmain/sitelogo.bmp
  • winmain/statusbar.bmp
  • winmain/treeback.bmp
  • winmain/treetitle_game.bmp
  • winmain/treetitle_match.bmp
  • winmain/treetitle_service.bmp
  • winmain/userinfo.bmp
  • winmain/webframe.bmp
  • xvidcore.dll
    .dll windows:4 windows x86 arch:x86

    8c6cf3c7f9082f43029ae889242b0467


    Headers

    Imports

    Exports

    Sections