Overview

overview

7

Static

static

7

a227c96b4c...18.exe

windows7-x64

7

a227c96b4c...18.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

DTDJ_1.exe

windows7-x64

3

DTDJ_1.exe

windows10-2004-x64

3

SuperFast.exe

windows7-x64

3

SuperFast.exe

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    a227c96b4c189991635bf8df27aeadd1_JaffaCakes118

  • Size

    1.2MB

  • MD5

    a227c96b4c189991635bf8df27aeadd1

  • SHA1

    ec1fee3c2ab717d6cac74e229cd1993d188b2a42

  • SHA256

    c34be04e27c0ce07db02ae4d1462c5193b5d9f25adad5d38f22c895de32a6dfb

  • SHA512

    9bbe124e7637e0569d7fd898641afff517feb6d8f334a55cb0e8ee9091bd044c44e09cfcb2593d325d6b241e9bba5666b1d9d79be70662a272618893105e6c34

  • SSDEEP

    24576:MT4UlyinJEJFKh4CThL7QUdqMlg61PoeC01hkPhV46tDwDzdjAZ8YM:Yymd7/+koeZIhQzd8ZC

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • a227c96b4c189991635bf8df27aeadd1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    711c893e4d8189fd14b6563a4e35e663


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    946eb0a1e85c9ade4acaf634eb5a64f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • BG/BG.bmp
  • BG/BG1.bmp
  • BG/Bubbles.bmp
  • BG/PuzzleBack1.bmp
  • BG/PuzzleBack10.bmp
  • BG/PuzzleBack2.bmp
  • BG/PuzzleBack3.bmp
  • BG/PuzzleBack4.bmp
  • BG/PuzzleBack5.bmp
  • BG/PuzzleBack6.bmp
  • BG/PuzzleBack7.bmp
  • BG/PuzzleBack8.bmp
  • BG/PuzzleBack9.bmp
  • BG/Triangles.bmp
  • BG/dbg1.bmp
  • BGM.m3u
  • BGM/01.MID
  • BGM/04.MID
  • BGM/06.MID
  • BGM/10.MID
  • BGM/FINAL ACT.mid
  • BGM/GBʥ˵Boss.mid
  • BGM/History of the Moon.mid
  • BGM/SRW-4 ʥʿ.mid
  • BGM/THE SECOND ACT.mid
  • BGM/TheParasprinter.mid
  • BGM/Trombe.mid
  • BGM/back1.mid
  • BGM/back2.mid
  • BGM/back_py1.mid
  • BGM/sybaster.mid
  • BGM/violent battle.mid
  • BGM/ħŮ_ΰ.mid
  • BGM/ˮϻ궷.mid
  • BGM/|Ѫ Old World.mid
  • BGM/ħ1.mid
  • BGM/̹.mid
  • BGM/ŵ˹һ.mid
  • BGM/ŵ˹.mid
  • BGM/˴սDZɱBGM.mid
  • BGM/.mid
  • BGM/ҲԶ.mid
  • BGM/ְex--exchun.mid
  • BGM/ְ.mid
  • BGM/ɫޥ`ѩ`.mid
  • BGM/2-1.mid
  • BGM/5-óDZ.mid
  • BGM/λģս.mid
  • BGM/ƻ԰.mid
  • BGM/2.mid
  • BGM/֮.mid
  • BGM/ȡw  Lunatic Princess.mid
  • BGM/1.mid
  • DTDJ_1.exe
    .exe windows:5 windows x86 arch:x86

    4dbc5d08df28b8f55d5238d42ee67fa8


    Headers

    Imports

    Sections

  • Jumping_lost14.sfv
  • Jumping_win13.sfv
  • Main_dtdj.ini
  • SuperFast.cfg
  • SuperFast.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp