General

  • Target

    a140220d552fc6e73edbb9064116877f_JaffaCakes118

  • Size

    8.8MB

  • MD5

    a140220d552fc6e73edbb9064116877f

  • SHA1

    8273c207dcbfeaf6fdafcec1e6369d90bb4a8d80

  • SHA256

    c4f10dda2c1625665bb71340d37065f963d6d446cb742b511a960b6769d52737

  • SHA512

    21c19be57b812aa979ef926fbb5a9e62885b327f9f9e04db42400672d1f9787a14d02df6fc9692e22fb5d1ca1fa5a529358a04cba1a2c7f1499e499a2722cba8

  • SSDEEP

    196608:7hwOFiaQ7LL287KpLOA8KjBFqM1soug61TAEnCe8H498ekBFJ:lTwaQX+pLJ8GY8F8AECAYFJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • a140220d552fc6e73edbb9064116877f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • Data/3Ddata/character.pak
  • FreeImage.dll
    .dll windows:4 windows x86 arch:x86

    b3b9d6c411ee6b1733773556ff850f23


    Headers

    Imports

    Exports

    Sections

  • LUNAClient.exe
    .exe windows:4 windows x86 arch:x86

    da55bc5aff33636bd6805c7dcebcd263


    Headers

    Imports

    Sections

  • LUNAPatcher.exe
    .exe windows:5 windows x86 arch:x86

    ad2138a95397cb2e9799c70184175c13


    Headers

    Imports

    Exports

    Sections

  • Options.exe
    .exe windows:5 windows x86 arch:x86

    1cb8fe5f83eb0465e8dd509ab04468f6


    Headers

    Imports

    Sections

  • SoundLib.dll
    .dll windows:4 windows x86 arch:x86

    3a0b691c2029dafff244053fc2d13bdb


    Headers

    Imports

    Exports

    Sections

  • atl100.dll
    .dll windows:5 windows x86 arch:x86

    0bbf1228f837ecb83ec693b705100bde


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • celestiapatch
    .gz
  • celestiapatch
  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections