General

  • Target

    a09ab78abf08cf291b5873c29ef67e01_JaffaCakes118

  • Size

    14.8MB

  • MD5

    a09ab78abf08cf291b5873c29ef67e01

  • SHA1

    82825682dacd9661d172720c5d9b0fc9f5134b8e

  • SHA256

    8ef840fa379b5ce9b0cf5c3253bae1aa0ea13d1355443bcd9a8a7019b01945f1

  • SHA512

    e48a048524b8ad463363a4ecea35647e559d48cfe7bba05a4fb8217882615fe106ebf044f075e0dfbcc61295565ab176cb4f3aaebcf40fd005040004643f43ba

  • SSDEEP

    393216:2jdSjXscS1lT3DSPfEEnQCDbLI43Z+s+pYmiNsM2O1D:03POPbnhDbLBpf+pYm8d

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • a09ab78abf08cf291b5873c29ef67e01_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Baidu_Explorer.exe
    .exe windows:4 windows x86 arch:x86

    93dae3a62029b42994e6066e53d957b8


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/GGExit.exe
    .exe windows:4 windows x86 arch:x86

    6d9e302630236c2f48faec66c7279399


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PluginSetup-Simpchinese.ini
  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • AudioCapture.dll
    .dll windows:4 windows x86 arch:x86

    762b13b876a54f52c249939b179810a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AudioCodec1.dll
    .dll windows:4 windows x86 arch:x86

    f8410c3dce8c223672198bb8cd34c429


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AudioCodec2.dll
    .dll windows:4 windows x86 arch:x86

    f6b9b7f76f67521152057b9e22b48c89


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AudioCodec3.dll
    .dll windows:4 windows x86 arch:x86

    73b8553e8adb7e658ef50d0961c5b298


    Code Sign

    Headers

    Imports

    Sections

  • ChatRoom/CapSreen.dll
    .dll windows:4 windows x86 arch:x86

    a9abc29c0eaf7f0ffcae40f20744d026


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChatRoom/ChatRoomClient.dll
    .dll windows:4 windows x86 arch:x86

    7376bff580f47ffb69cf463cb79c7325


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChatRoom/ChatRoomUI.dll
    .dll windows:4 windows x86 arch:x86

    295201b765c8a5f373f04dda38ddf6ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChatRoom/Config.ini
  • ChatRoom/Skin/Alarm.png
    .png
  • ChatRoom/Skin/DefFace.bmp
  • ChatRoom/Skin/MercuryChatRoom.ggs
  • ChatRoom/Skin/PointToPoint.bmp
  • ChatRoom/Skin/PrivteMic.bmp
  • ChatRoom/Skin/VideoBack.bmp
  • ChatRoom/Skin/VideoBackMercury.bmp
  • ChatRoom/Skin/VideoBack_16_9.bmp
  • ChatRoom/Skin/VideoBack_4_3.bmp
  • ChatRoom/UIToolTip.dll
    .dll windows:4 windows x86 arch:x86

    04897ae99bc29616991912ca68521429


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChatRoom/VcrMediaLib.dll
    .dll windows:4 windows x86 arch:x86

    0ea7215c4a6ca9f1d8159aeb0ae66a4c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChatRoom/VolumeCtrl.dll
    .dll windows:5 windows x86 arch:x86

    9f214f5ff27e25a36acb6f280f58f6be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChatRoom/data/AudioEffect1.WAV
  • ChatRoom/data/FlowerData.dat
  • ChatRoom/data/KingEnter.wav
  • ChatRoom/data/KingLeave.wav
  • ChatRoom/data/QueenEnter.wav
  • ChatRoom/data/QueenLeave.wav
  • ChatRoomUI.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    135cc4765d434b7922f2bb51b73648fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Config.ini
  • DnsSession.dll
    .dll windows:4 windows x86 arch:x86

    152e5a83756de4cf9a980d1be9981ec7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EncWmv.dll
    .dll windows:4 windows x86 arch:x86

    5b3f9a2956f683d60eb5c773dd4ed6f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EquipCenter.dll
    .dll windows:4 windows x86 arch:x86

    e09a16b581ea66a21c7c3b3f5c3db3be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Game/ThreeCard/AzimuthInfo.ini
  • Game/ThreeCard/Config.ini
  • Game/ThreeCard/GameClientUI.exe
    .exe windows:4 windows x86 arch:x86

    36ecd6ff058c45e341afb41ae3bae265


    Code Sign

    Headers

    Imports

    Sections

  • Game/ThreeCard/Image/1-1.png
    .png
  • Game/ThreeCard/Image/1-10.png
    .png
  • Game/ThreeCard/Image/1-11.png
    .png
  • Game/ThreeCard/Image/1-12.png
    .png
  • Game/ThreeCard/Image/1-13.png
    .png
  • Game/ThreeCard/Image/1-14.png
    .png
  • Game/ThreeCard/Image/1-15.png
    .png
  • Game/ThreeCard/Image/1-16.png
    .png
  • Game/ThreeCard/Image/1-17.png
    .png
  • Game/ThreeCard/Image/1-18.png
    .png
  • Game/ThreeCard/Image/1-19.png
    .png
  • Game/ThreeCard/Image/1-2.png
    .png
  • Game/ThreeCard/Image/1-20.png
    .png
  • Game/ThreeCard/Image/1-21.png
    .png
  • Game/ThreeCard/Image/1-22.png
    .png
  • Game/ThreeCard/Image/1-23.png
    .png
  • Game/ThreeCard/Image/1-24.png
    .png
  • Game/ThreeCard/Image/1-25.png
    .png
  • Game/ThreeCard/Image/1-3.png
    .png
  • Game/ThreeCard/Image/1-4.png
    .png
  • Game/ThreeCard/Image/1-5.png
    .png
  • Game/ThreeCard/Image/1-6.png
    .png
  • Game/ThreeCard/Image/1-7.png
    .png
  • Game/ThreeCard/Image/1-8.png
    .png
  • Game/ThreeCard/Image/1-9.png
    .png
  • Game/ThreeCard/Image/2-1.png
    .png
  • Game/ThreeCard/Image/2-10.png
    .png
  • Game/ThreeCard/Image/2-11.png
    .png
  • Game/ThreeCard/Image/2-12.png
    .png
  • Game/ThreeCard/Image/2-2.png
    .png
  • Game/ThreeCard/Image/2-3.png
    .png
  • Game/ThreeCard/Image/2-4.png
    .png
  • Game/ThreeCard/Image/2-5.png
    .png
  • Game/ThreeCard/Image/2-6.png
    .png
  • Game/ThreeCard/Image/2-7.png
    .png
  • Game/ThreeCard/Image/2-8.png
    .png
  • Game/ThreeCard/Image/2-9.png
    .png
  • Game/ThreeCard/Image/3-1.png
    .png
  • Game/ThreeCard/Image/3-10.png
    .png
  • Game/ThreeCard/Image/3-11.png
    .png
  • Game/ThreeCard/Image/3-12.png
    .png
  • Game/ThreeCard/Image/3-2.png
    .png
  • Game/ThreeCard/Image/3-3.png
    .png
  • Game/ThreeCard/Image/3-4.png
    .png
  • Game/ThreeCard/Image/3-5.png
    .png
  • Game/ThreeCard/Image/3-6.png
    .png
  • Game/ThreeCard/Image/3-7.png
    .png
  • Game/ThreeCard/Image/3-8.png
    .png
  • Game/ThreeCard/Image/3-9.png
    .png
  • Game/ThreeCard/Image/4-1.png
    .png
  • Game/ThreeCard/Image/4-2.png
    .png
  • Game/ThreeCard/Image/4-3.png
    .png
  • Game/ThreeCard/Image/4-4.png
    .png
  • Game/ThreeCard/Image/4-5.png
    .png
  • Game/ThreeCard/Image/4-6.png
    .png
  • Game/ThreeCard/Image/4-7.png
    .png
  • Game/ThreeCard/Image/4-8.png
    .png
  • Game/ThreeCard/Image/6_1.png
    .png
  • Game/ThreeCard/Image/6_2.png
    .png
  • Game/ThreeCard/Image/6_3.png
    .png
  • Game/ThreeCard/Image/6_4.png
    .png
  • Game/ThreeCard/Image/6_5.png
    .png
  • Game/ThreeCard/Image/6_6.png
    .png
  • Game/ThreeCard/Image/Bugle.gif
    .gif
  • Game/ThreeCard/Image/Change.png
    .png
  • Game/ThreeCard/Image/Coin.png
    .png
  • Game/ThreeCard/Image/Continue.png
    .png
  • Game/ThreeCard/Image/DrawCoin.png
    .png
  • Game/ThreeCard/Image/Exit.png
    .png
  • Game/ThreeCard/Image/GiftBack.png
    .png
  • Game/ThreeCard/Image/GiveUp.png
    .png
  • Game/ThreeCard/Image/GiveupStatus.png
    .png
  • Game/ThreeCard/Image/GoodsBack.png
    .png
  • Game/ThreeCard/Image/HistoryScore.png
    .png
  • Game/ThreeCard/Image/NomalCard.png
    .png
  • Game/ThreeCard/Image/PrepareText.png
    .png
  • Game/ThreeCard/Image/Select.png
    .png
  • Game/ThreeCard/Image/SmallCard.png
    .png
  • Game/ThreeCard/Image/Start.png
    .png
  • Game/ThreeCard/Image/UnSelect.png
    .png
  • Game/ThreeCard/Image/addmoney.png
    .png
  • Game/ThreeCard/Image/back.png
    .png
  • Game/ThreeCard/Image/background.png
    .png
  • Game/ThreeCard/Image/banker.png
    .png
  • Game/ThreeCard/Image/clockbk.png
    .png
  • Game/ThreeCard/Image/clockbkfive.png
    .png
  • Game/ThreeCard/Image/clocknum.png
    .png
  • Game/ThreeCard/Image/clocknumfive.png
    .png
  • Game/ThreeCard/Image/compare.png
    .png
  • Game/ThreeCard/Image/desperate.png
    .png
  • Game/ThreeCard/Image/doa.png
    .png
  • Game/ThreeCard/Image/double.png
    .png
  • Game/ThreeCard/Image/eighth.png
    .png
  • Game/ThreeCard/Image/forth.png
    .png
  • Game/ThreeCard/Image/front.png
    .png
  • Game/ThreeCard/Image/gift.png
    .png
  • Game/ThreeCard/Image/gsf.png
    .png
  • Game/ThreeCard/Image/leopard.png
    .png
  • Game/ThreeCard/Image/look.png
    .png
  • Game/ThreeCard/Image/lose.png
    .png
  • Game/ThreeCard/Image/player.gif
    .gif
  • Game/ThreeCard/Image/showall.png
    .png
  • Game/ThreeCard/Image/shown.png
    .png
  • Game/ThreeCard/Image/single.png
    .png
  • Game/ThreeCard/Image/system.gif
    .gif
  • Game/ThreeCard/Image/totalmoney.png
    .png
  • Game/ThreeCard/Image/unshown.png
    .png
  • Game/ThreeCard/Image/win.png
    .png
  • Game/ThreeCard/Image16PixelColor.bmp
  • Game/ThreeCard/Image16PixelGray.bmp
  • Game/ThreeCard/Image32PixelColor.bmp
  • Game/ThreeCard/Image32PixelGray.bmp
  • Game/ThreeCard/ImageCategoryColor.bmp
  • Game/ThreeCard/ImageCategoryGray.bmp
  • Game/ThreeCard/PCtable.ini
  • Game/ThreeCard/PlugPicture.ini
  • Game/ThreeCard/Rank.ini
  • Game/ThreeCard/ShowText.html
    .js
  • Game/ThreeCard/Skin/DefFace32.bmp
  • Game/ThreeCard/Skin/GameClientSkin.ggs
  • Game/ThreeCard/Skin/GameClientUI.xml
    .xml
  • Game/ThreeCard/Skin/GameClientUI.xml.bak
    .xml
  • Game/ThreeCard/Skin/PreventCheat.bmp
  • Game/ThreeCard/Skin/PreventCheat.png
    .png
  • Game/ThreeCard/Skin/desk.bmp
  • Game/ThreeCard/Skin/desk.png
    .png
  • Game/ThreeCard/Skin/desk_play.bmp
  • Game/ThreeCard/Skin/desk_play.png
    .png
  • Game/ThreeCard/Skin/float_chair.png
    .png
  • Game/ThreeCard/Skin/free_chair.bmp
  • Game/ThreeCard/Skin/free_chair.png
    .png
  • Game/ThreeCard/StyleControl.dll
    .dll windows:4 windows x86 arch:x86

    4c5c2a93885102ec416c1c67a5f3f23f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Game/ThreeCard/ThreeCard.dll
    .dll windows:4 windows x86 arch:x86

    8966e70a0380c07e4a12f35d4213bde0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Game/ThreeCard/bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Game/ThreeCard/crash.txt
  • Game/ThreeCard/info.xml
  • Game/ThreeCard/sound/BACKGROUND.mp3
  • Game/ThreeCard/sound/GameBegin.ogg
  • Game/ThreeCard/sound/chip.ogg
  • Game/ThreeCard/sound/lose.ogg
  • Game/ThreeCard/sound/man/add.ogg
  • Game/ThreeCard/sound/man/com.ogg
  • Game/ThreeCard/sound/man/follow.ogg
  • Game/ThreeCard/sound/man/giveup.ogg
  • Game/ThreeCard/sound/man/look.mp3
  • Game/ThreeCard/sound/man/put.ogg
  • Game/ThreeCard/sound/man/ready.ogg
  • Game/ThreeCard/sound/man/showall.mp3
  • Game/ThreeCard/sound/win.ogg
  • Game/ThreeCard/sound/woman/add.ogg
  • Game/ThreeCard/sound/woman/com.ogg
  • Game/ThreeCard/sound/woman/follow.ogg
  • Game/ThreeCard/sound/woman/giveup.ogg
  • Game/ThreeCard/sound/woman/look.mp3
  • Game/ThreeCard/sound/woman/put.ogg
  • Game/ThreeCard/sound/woman/ready.ogg
  • Game/ThreeCard/sound/woman/showall.mp3
  • Game/ThreeCard/table.ini
  • GameRoom/Config.ini
  • GameRoom/GameRoomClient.dll
    .dll windows:4 windows x86 arch:x86

    e2e0dd52e7330ad1e02715c01e0860d1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GameRoom/GameRoomUI.dll
    .dll windows:4 windows x86 arch:x86

    2f97405f07f14a75b6c5acfc0322ebb7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GameRoom/Image16PixelColor.bmp
  • GameRoom/Image16PixelGray.bmp
  • GameRoom/Image32PixelColor.bmp
  • GameRoom/Image32PixelGray.bmp
  • GameRoom/Login.gif
    .gif
  • GameRoom/plugfolderfocus.bmp
  • GameRoom/plugfoldernormal.bmp
  • GameRoom/skin/Bugle.gif
    .gif
  • GameRoom/skin/DefFace16.bmp
  • GameRoom/skin/DefFace32.bmp
  • GameRoom/skin/FaceBase.png
    .png
  • GameRoom/skin/FigureBase.png
    .png
  • GameRoom/skin/GameManager.gif
    .gif
  • GameRoom/skin/GameRoomSkin.ggs
  • GameRoom/skin/GreenDiamond1.gif
    .gif
  • GameRoom/skin/GreenDiamond2.gif
    .gif
  • GameRoom/skin/GreenDiamond3.gif
    .gif
  • GameRoom/skin/GreenDiamond4.gif
    .gif
  • GameRoom/skin/GreenDiamond5.gif
    .gif
  • GameRoom/skin/GreenDiamond6.gif
    .gif
  • GameRoom/skin/GreenDiamond7.gif
    .gif
  • GameRoom/skin/Icon.ini
  • GameRoom/skin/certified.png
    .png
  • GameRoom/skin/hand.png
    .png
  • GameRoom/skin/info.xml
  • GameRoom/skin/lock.bmp
  • GameRoom/skin/lock.png
    .png
  • GameRoom/skin/lookother.png
    .png
  • GameRoom/skin/play.png
    .png
  • GameRoom/skin/player.gif
    .gif
  • GameRoom/skin/player.png
    .png
  • GameRoom/skin/sitdown.png
    .png
  • GameRoom/skin/system.gif
    .gif
  • GameRoom/skin/system.png
    .png
  • ImageOle.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    18e201c66fb36f0c34f99d047daacbc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Install.ini
  • MFC71u.dll
    .dll windows:4 windows x86 arch:x86

    b3fbf4599c17e9bc7ccae6518bf0f868


    Code Sign

    Headers

    Imports

    Sections

  • MN.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • MercuryNavigation/MFC71u.dll
    .dll windows:4 windows x86 arch:x86

    b3fbf4599c17e9bc7ccae6518bf0f868


    Code Sign

    Headers

    Imports

    Sections

  • MercuryNavigation/MercuryNavigation.exe
    .exe windows:4 windows x86 arch:x86

    e1f813224452891a2c9fa0e29b1a8f5a


    Headers

    Imports

    Sections

  • MercuryNavigation/MercuryNavigation.ini
  • MercuryNavigation/NavigationSkin/MercuryNavigationSkin.ggs
  • MercuryNavigation/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MercuryNavigation/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MercuryNavigation/uninst.exe.nsis
  • Mp4Maker.exe
    .exe windows:4 windows x86 arch:x86

    1f68c90cff8a30b4c0e3f92a4f23f231


    Code Sign

    Headers

    Imports

    Sections

  • ProcessCS.dll
    .dll windows:4 windows x86 arch:x86

    b28be7c4a7f333279a14ae3103dfe639


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qixi55.exe
    .exe windows:4 windows x86 arch:x86

    cb5849ee0e94ec1c5b765ee4c7bdb302


    Code Sign

    Headers

    Imports

    Sections

  • ResCenter.dll
    .dll windows:4 windows x86 arch:x86

    3e3465bda8fed8f973e5bf8390914ab3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RtpStack.DLL
    .dll windows:4 windows x86 arch:x86

    784794bd29e6f793431c8af904f233f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Skin/Alarm.png
    .png
  • Skin/DefFace.bmp
  • Skin/DefFace_16.bmp
  • Skin/DefFace_21.bmp
  • Skin/DefSendedStarGift.gif
    .gif
  • Skin/MercuryChatHallSkin.ggs
  • Skin/MercuryEquipCenterSkin.ggs
  • Skin/MercuryUpdateSkin.ggs
  • Skin/Thumbs.db
  • Skin/VideoBack.bmp
  • Skin/default_female.png
    .png
  • Skin/default_male.png
    .png
  • Skin/login.gif
    .gif
  • UIToolTip.dll
    .dll windows:4 windows x86 arch:x86

    0b5fe4eb2b7be03512291391bd4a08c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Update.exe
    .exe windows:4 windows x86 arch:x86

    9bd82ec4c9ca034d59cf3698bdb56104


    Code Sign

    Headers

    Imports

    Sections

  • VideoCapture.dll
    .dll windows:4 windows x86 arch:x86

    a8638fcc38ef377834e80577f30abd68


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VideoCodec1.dll
    .dll windows:4 windows x86 arch:x86

    25a7dddc6585fb86545c4455570f7566


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VideoDecode2.dll
    .dll windows:4 windows x86 arch:x86

    a4bacaf55e89f395e2a6d80f0fb45bfb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VideoEncode2.dll
    .dll windows:4 windows x86 arch:x86

    3b43ecc47d73f03f9ca67aaf55bcbcc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/FlowerData.dat
  • data/HTML/css/news.css
  • data/HTML/head/head1.gif
    .gif
  • data/HTML/img/button.png
    .png
  • data/HTML/img/button_left.gif
    .gif
  • data/HTML/img/close.gif
    .gif
  • data/HTML/img/freeze.gif
    .gif
  • data/HTML/img/liebiao_di.gif
    .gif
  • data/HTML/img/liebiao_di_on.gif
    .gif
  • data/HTML/img/lock_cl.gif
    .gif
  • data/HTML/img/lock_cl.png
    .png
  • data/HTML/img/lock_op.gif
    .gif
  • data/HTML/img/lock_op.png
    .png
  • data/HTML/img/right.gif
    .gif
  • data/HTML/img/wrong.gif
    .gif
  • data/IllWord.dat
  • data/Update.dat
  • data/common.dat
  • gdiplus.dll
    .dll windows:5 windows x86 arch:x86

    7941976a82dd7ff8b1a2ea069878fab3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis