Overview

overview

7

Static

static

3

8a8835e7e0...18.exe

windows7-x64

7

8a8835e7e0...18.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

Chinese.dll

windows7-x64

3

Chinese.dll

windows10-2004-x64

3

English.dll

windows7-x64

3

English.dll

windows10-2004-x64

3

VirtuaNESex.exe

windows7-x64

3

VirtuaNESex.exe

windows10-2004-x64

3

info/Setup.exe

windows7-x64

3

info/Setup.exe

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    8a8835e7e078c5d598cc2ed33101c484_JaffaCakes118

  • Size

    666KB

  • MD5

    8a8835e7e078c5d598cc2ed33101c484

  • SHA1

    79bd5ac9871ed5935c2498ce857b2f152bb677e2

  • SHA256

    14ec20cee07c57dc581c9be74358f72a6dace120aa865cd6032bbdae1dd3a90f

  • SHA512

    df43279041692d2e68e22ef3b09399bb36d670c309e73f2eb6a429745bd2d27548b0e1168d6ebd791683c89b8f4384b80cd9219f6e414a582cb2df95cf714688

  • SSDEEP

    12288:RMHgN/PjlSCOIU3/qDTnlv6thkyImVNvFMUJvN5NTmMbCubfjBF:RMHcjsCOIU3qJSh1Im3vFMA3JbCYdF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 8a8835e7e078c5d598cc2ed33101c484_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    295fc8c35dee88b924b0f6bafc807c6c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • CheatCode/Castlevania (E).gen
  • CheatCode/SpartanX.vct
  • CheatCode/Super Mario Bros (E).gen
  • Chinese.vlp
    .dll windows:4 windows x86 arch:x86

    46039de89f8560750f5a6dacd1c7a453


    Headers

    Imports

    Exports

    Sections

  • Disksys.rom
  • Doc/Cheat_E.txt
  • Doc/ExtSound_E.txt
  • Doc/History_E.txt
  • Doc/Mappers.txt
  • Doc/NetPlay_E.txt
  • Doc/Readme_E.txt
  • English.vlp
    .dll windows:4 windows x86 arch:x86

    fb80b577eec61d576561a1fb3cd53b9d


    Headers

    Imports

    Exports

    Sections

  • VirtuaNES.ini
  • VirtuaNESex.exe
    .exe windows:4 windows x86 arch:x86

    871513f0f86b8472613899d6a448a6a9


    Headers

    Imports

    Sections

  • VirtuaNESex.txt
  • info/Setup.exe
    .exe windows:4 windows x86 arch:x86

    2ca162dfb4fa482f344d9f867513e1ec


    Headers

    Imports

    Sections

  • roms//.NES
  • roms//.vct
  • save/pal_I.sav
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • ʹ˵_.txt
  • Ϸ˵.txt