Set
Unload
General
-
Target
a548699f002c7f9452656cb1202eaca7_JaffaCakes118
-
Size
6.5MB
-
MD5
a548699f002c7f9452656cb1202eaca7
-
SHA1
2a2ab5f440f44d7cd742b77a442c4717f66f0de1
-
SHA256
2d18e6ad6ce760bd810cbeee4ac24d8b7bd4c1db608ed4aef07c6ecd6b1868c3
-
SHA512
e49b1a6b023800434db19d5c319e9db593674d7b66c9db1f04c7e7d593d3275f008b84d4337c73e1de20146d28b3c9e33f9987491620dc02b73e0a5ec9654522
-
SSDEEP
98304:I3g6eb4UyCbv55XI3jQ7iDC41fRParMyb1F96weFGvu4sFeU7kPG/Rx/s994PveX:VXblzXI3jQGWedaJZFwweFGvuoK0Y2Me
Score
3/10
Malware Config
Signatures
-
Unsigned PE 32 IoCs
Checks for missing Authenticode signature.
-
NSIS installer 4 IoCs
Files
-
a548699f002c7f9452656cb1202eaca7_JaffaCakes118
dfb06052e74b26a42b0e490bd1c07959
Headers
Imports
Sections
-
$APPDATA/114la.ico
-
$PLUGINSDIR/BrandingURL.dll
135de77644e2add2fd9dd8176740e7e0
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/InstallOptions.dll
0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/System.dll
2017f2acbdaa42ab3e4adeb8b4c37e7b
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/ioSpecial.ini
-
$PLUGINSDIR/modern-header.bmp
-
$PLUGINSDIR/modern-wizard.bmp
-
$PLUGINSDIR/nsDialogs.dll
1e2884056e655f2b7bc5a904e352fc80
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/nsProcess.dll
c9fc7f6df8fedf8f8f1f9f820c072664
Headers
Imports
Exports
Sections
-
$SYSDIR/linkRoom.dll
fa0bdde9c1a69cf1c8e351a7a5142165
Headers
Imports
Exports
Sections
-
$SYSDIR/xvidcore2.dll
106bd10d32c39fef1d2f3645a6a61c56
Headers
Imports
Exports
Sections
-
FRate3.ax
7ee3d6defd547b314865c33d4a658beb
Headers
Imports
Exports
Sections
-
FileTrans.dll
ed15c5169178e8d80a8b5764e480f798
Headers
Imports
Exports
Sections
-
GxdRender3.ax
a1c3dd85a1c7ad8817950416b3b2857c
Headers
Imports
Exports
Sections
-
GxdSource3.ax
694e6ade95ec2a4e86888dd28f1776f3
Headers
Imports
Exports
Sections
-
KVideoCodec.dll
a5a5b0bca9f2cab408522fae10d00a3f
Headers
Imports
Exports
Sections
-
UnRAR.exe
6ead8cdd324aa83b32b7037bd7925408
Headers
Imports
Exports
Sections
-
Uninst.exe
dfb06052e74b26a42b0e490bd1c07959
Headers
Imports
Sections
-
$PLUGINSDIR/BrandingURL.dll
135de77644e2add2fd9dd8176740e7e0
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/modern-header.bmp
-
$PLUGINSDIR/nsProcess.dll
c9fc7f6df8fedf8f8f1f9f820c072664
Headers
Imports
Exports
Sections
-
avcodec.dll
c918b414039e20804a8e750c72057d1e
Headers
Imports
Exports
Sections
-
avutil.dll
992b69c582c34030072b7a8cd2843c32
Headers
Imports
Exports
Sections
-
cfg.ini
-
cximage.dll
cb8e709991f21c0dc650073c134e6b0b
Headers
Imports
Exports
Sections
-
img/display/audio.bmp
-
img/display/crown.bmp
-
img/display/diamond_blue.bmp
-
img/display/diamond_red.bmp
-
img/display/gift_bonus1.bmp
-
img/display/gift_bonus2.bmp
-
img/display/gift_bonus3.bmp
-
img/display/gift_bonus4.bmp
-
img/display/gift_bonus5.bmp
-
img/display/gift_master.bmp
-
img/display/master.bmp
-
img/display/master_assis.bmp
-
img/display/mic.bmp
-
img/display/no_audio.bmp
-
img/display/op_persist.bmp
-
img/display/op_persist_ad.bmp
-
img/display/op_temp.bmp
-
img/display/op_temp_ad.bmp
-
img/display/video.bmp
-
img/display/video2.bmp
-
img/display/video3.bmp
-
img/display/zone.bmp
-
img/display/zone2.bmp
-
img/enter/01.gif
-
img/enter/02.gif
-
img/enter/03.gif
-
img/enter/04.gif
-
img/enter/05.gif
-
img/enter/06.gif
-
img/enter/07.gif
-
img/enter/08.gif
-
img/enter/09.gif
-
img/enter/10.gif
-
img/enter/11.gif
-
img/enter/12.gif
-
img/enter/13.gif
-
img/enter/14.gif
-
img/enter/15.gif
-
img/enter/16.gif
-
img/enter/17.gif
-
img/enter/18.gif
-
img/enter/19.gif
-
img/enter/20.gif
-
img/enter/21.gif
-
img/enter/22.gif
-
img/enter/23.gif
-
img/enter/24.gif
-
img/enter/25.gif
-
img/enter/26.gif
-
img/enter/27.gif
-
img/enter/28.gif
-
img/enter/29.gif
-
img/enter/30.gif
-
img/enter/31.gif
-
img/enter/32.gif
-
img/enter/33.gif
-
img/enter/34.gif
-
img/enter/35.gif
-
img/enter/36.gif
-
img/enter/37.gif
-
img/enter/38.gif
-
img/enter/39.gif
-
img/enter/40.gif
-
img/enter/41.gif
-
img/enter/42.gif
-
img/enter/43.gif
-
img/enter/44.gif
-
img/enter/45.gif
-
img/enter/46.gif
-
img/enter/47.gif
-
img/enter/48.gif
-
img/enter/49.gif
-
img/enter/50.gif
-
img/enter/51.gif
-
img/enter/52.gif
-
img/enter/53.gif
-
img/enter/54.gif
-
img/enter/55.gif
-
img/enter/56.gif
-
img/enter/57.gif
-
img/enter/58.gif
-
img/enter/59.gif
-
img/enter/60.gif
-
img/enter/61.gif
-
img/enter/62.gif
-
img/enter/63.gif
-
img/enter/64.gif
-
img/enter/65.gif
-
img/enter/66.gif
-
img/enter/67.gif
-
img/enter/68.gif
-
img/enter/69.gif
-
img/enter/70.gif
-
img/enter/71.gif
-
img/enter/72.gif
-
img/enter/73.gif
-
img/enter/74.gif
-
img/enter/75.gif
-
img/enter/76.gif
-
img/enter/77.gif
-
img/enter/78.gif
-
img/enter/79.gif
-
img/enter/80.gif
-
img/enter/config.ini
-
img/face/00.gif
-
img/face/01.gif
-
img/face/02.gif
-
img/face/03.gif
-
img/face/04.gif
-
img/face/05.gif
-
img/face/06.gif
-
img/face/07.gif
-
img/face/08.gif
-
img/face/09.gif
-
img/face/10.gif
-
img/face/11.gif
-
img/face/12.gif
-
img/face/13.gif
-
img/face/14.gif
-
img/face/15.gif
-
img/face/16.gif
-
img/face/17.gif
-
img/face/18.gif
-
img/face/19.gif
-
img/face/20.gif
-
img/face/21.gif
-
img/face/22.gif
-
img/face/23.gif
-
img/face/24.gif
-
img/face/25.gif
-
img/face/26.gif
-
img/face/27.gif
-
img/face/28.gif
-
img/face/29.gif
-
img/face/30.gif
-
img/face/31.gif
-
img/face/32.gif
-
img/face/33.gif
-
img/face/34.gif
-
img/face/35.gif
-
img/face/36.gif
-
img/face/37.gif
-
img/face/38.gif
-
img/face/39.gif
-
img/face/40.gif
-
img/face/41.gif
-
img/face/42.gif
-
img/face/43.gif
-
img/face/44.gif
-
img/face/45.gif
-
img/face/46.gif
-
img/face/47.gif
-
img/face/48.gif
-
img/face/49.gif
-
img/face/50.gif
-
img/face/51.gif
-
img/face/52.gif
-
img/face/53.gif
-
img/face/54.gif
-
img/face/55.gif
-
img/face/56.gif
-
img/face/57.gif
-
img/face/58.gif
-
img/face/59.gif
-
img/face/60.gif
-
img/face/61.gif
-
img/face/62.gif
-
img/face/63.gif
-
img/face/64.gif
-
img/face/65.gif
-
img/face/66.gif
-
img/face/67.gif
-
img/face/68.gif
-
img/face/69.gif
-
img/face/70.gif
-
img/face/71.gif
-
img/face/72.gif
-
img/face/73.gif
-
img/face/74.gif
-
img/face/75.gif
-
img/face/76.gif
-
img/face/77.gif
-
img/face/78.gif
-
img/face/79.gif
-
img/face/80.gif
-
img/face/81.gif
-
img/face/82.gif
-
img/face/83.gif
-
img/face/84.gif
-
img/face/85.gif
-
img/face/86.gif
-
img/face/87.gif
-
img/face/88.gif
-
img/face/89.gif
-
img/face/90.gif
-
img/face/91.gif
-
img/face/92.gif
-
img/face/config.ini
-
img/gift/1001.gif
-
img/gift/1002.gif
-
img/gift/1003.gif
-
img/gift/1004.gif
-
img/gift/1005.gif
-
img/gift/1006.gif
-
img/gift/1007.gif
-
img/gift/1008.gif
-
img/gift/1009.gif
-
img/gift/1010.gif
-
img/gift/1011.gif
-
img/gift/1012.gif
-
img/gift/1013.gif
-
img/gift/1014.gif
-
img/gift/1015.gif
-
img/gift/1016.gif
-
img/gift/1017.gif
-
img/gift/1018.gif
-
img/gift/1019.gif
-
img/gift/1020.gif
-
img/gift/1021.gif
-
img/gift/1022.gif
-
img/gift/1023.gif
-
img/gift/1024.gif
-
img/gift/1025.gif
-
img/gift/1026.gif
-
img/gift/1027.gif
-
img/gift/1028.gif
-
img/gift/1029.gif
-
img/gift/1030.gif
-
img/gift/config.ini
-
img/head/001.bmp
-
img/head/002.bmp
-
img/head/003.bmp
-
img/head/004.bmp
-
img/head/005.bmp
-
img/head/006.bmp
-
img/head/007.bmp
-
img/head/008.bmp
-
img/head/009.bmp
-
img/head/010.bmp
-
img/head/011.bmp
-
img/head/012.bmp
-
img/head/013.bmp
-
img/head/014.bmp
-
img/head/015.bmp
-
img/head/016.bmp
-
img/head/017.bmp
-
img/head/018.bmp
-
img/head/019.bmp
-
img/head/020.bmp
-
img/head/021.bmp
-
img/head/022.bmp
-
img/head/023.bmp
-
img/head/024.bmp
-
img/head/025.bmp
-
img/head/026.bmp
-
img/head/027.bmp
-
img/head/028.bmp
-
img/head/029.bmp
-
img/head/030.bmp
-
img/head/031.bmp
-
img/head/032.bmp
-
img/head/033.bmp
-
img/head/034.bmp
-
img/head/035.bmp
-
img/head/036.bmp
-
img/head/037.bmp
-
img/head/038.bmp
-
img/head/039.bmp
-
img/head/040.bmp
-
img/head/041.bmp
-
img/head/042.bmp
-
img/head/043.bmp
-
img/head/044.bmp
-
img/head/045.bmp
-
img/head/046.bmp
-
img/head/047.bmp
-
img/head/048.bmp
-
img/head/049.bmp
-
img/head/050.bmp
-
img/head/051.bmp
-
img/head/052.bmp
-
img/head/053.bmp
-
img/head/054.bmp
-
img/head/055.bmp
-
img/head/056.bmp
-
img/head/057.bmp
-
img/head/058.bmp
-
img/head/059.bmp
-
img/head/060.bmp
-
img/head/061.bmp
-
img/head/062.bmp
-
img/head/063.bmp
-
img/head/064.bmp
-
img/head/065.bmp
-
img/head/066.bmp
-
img/head/067.bmp
-
img/head/068.bmp
-
img/head/069.bmp
-
img/head/070.bmp
-
img/head/071.bmp
-
img/head/072.bmp
-
img/head/073.bmp
-
img/head/074.bmp
-
img/head/075.bmp
-
img/head/076.bmp
-
img/head/077.bmp
-
img/head/078.bmp
-
img/head/079.bmp
-
img/head/080.bmp
-
img/head/081.bmp
-
img/head/082.bmp
-
img/head/083.bmp
-
img/head/084.bmp
-
img/head/085.bmp
-
img/head/086.bmp
-
img/head/087.bmp
-
img/head/088.bmp
-
img/head/089.bmp
-
img/head/090.bmp
-
img/head/091.bmp
-
img/head/092.bmp
-
img/head/093.bmp
-
img/head/094.bmp
-
img/head/095.bmp
-
img/head/096.bmp
-
img/head/097.bmp
-
img/head/098.bmp
-
img/head/099.bmp
-
img/head/100.bmp
-
img/head/101.bmp
-
img/head/102.bmp
-
img/head/103.bmp
-
img/head/104.bmp
-
img/head/105.bmp
-
img/head/106.bmp
-
img/head/107.bmp
-
img/head/108.bmp
-
img/head/109.bmp
-
img/head/110.bmp
-
img/head/111.bmp
-
img/head/112.bmp
-
img/head/113.bmp
-
img/head/114.bmp
-
img/head/115.bmp
-
img/head/116.bmp
-
img/head/117.bmp
-
img/head/118.bmp
-
img/head/119.bmp
-
img/head/120.bmp
-
img/head/121.bmp
-
img/head/122.bmp
-
img/head/123.bmp
-
img/head/124.bmp
-
img/head/125.bmp
-
img/head/126.bmp
-
img/head/127.bmp
-
img/head/128.bmp
-
img/head/129.bmp
-
img/head/130.bmp
-
img/head/131.bmp
-
img/head/132.bmp
-
img/head/133.bmp
-
img/head/134.bmp
-
img/head/135.bmp
-
img/head/136.bmp
-
img/head/137.bmp
-
img/head/138.bmp
-
img/head/139.bmp
-
img/head/140.bmp
-
img/head/141.bmp
-
img/head/142.bmp
-
img/head/143.bmp
-
img/head/144.bmp
-
img/head/145.bmp
-
img/head/146.bmp
-
img/head/147.bmp
-
img/head/148.bmp
-
img/head/149.bmp
-
img/head/150.bmp
-
img/head/151.bmp
-
img/head/152.bmp
-
img/head/153.bmp
-
img/head/154.bmp
-
img/head/155.bmp
-
img/head/156.bmp
-
img/head/157.bmp
-
img/head/158.bmp
-
img/head/159.bmp
-
img/head/160.bmp
-
img/head/161.bmp
-
img/head/162.bmp
-
img/head/163.bmp
-
img/head/164.bmp
-
img/head/165.bmp
-
img/head/166.bmp
-
img/head/167.bmp
-
img/head/168.bmp
-
img/head/169.bmp
-
img/head/170.bmp
-
img/head/171.bmp
-
img/head/172.bmp
-
img/head/173.bmp
-
img/head/174.bmp
-
img/head/175.bmp
-
img/head/176.bmp
-
img/head/177.bmp
-
img/head/178.bmp
-
img/head/179.bmp
-
img/head/180.bmp
-
img/head/181.bmp
-
img/head/182.bmp
-
img/head/183.bmp
-
img/head/184.bmp
-
img/head/185.bmp
-
img/head/186.bmp
-
img/head/187.bmp
-
img/head/188.bmp
-
img/head/189.bmp
-
img/head/190.bmp
-
img/head/191.bmp
-
img/head/192.bmp
-
img/head/193.bmp
-
img/head/194.bmp
-
img/head/195.bmp
-
img/head/196.bmp
-
img/head/197.bmp
-
img/head/198.bmp
-
img/head/199.bmp
-
img/head/200.bmp
-
img/head/201.bmp
-
img/head/202.bmp
-
img/head/203.bmp
-
img/head/204.bmp
-
img/head/205.bmp
-
img/head/206.bmp
-
img/head/207.bmp
-
img/head/208.bmp
-
img/head/209.bmp
-
img/head/210.bmp
-
img/head/211.bmp
-
img/head/212.bmp
-
img/head/213.bmp
-
img/head/214.bmp
-
img/head/215.bmp
-
img/head/216.bmp
-
img/head/217.bmp
-
img/head/218.bmp
-
img/head/219.bmp
-
img/head/220.bmp
-
img/head/221.bmp
-
img/head/222.bmp
-
img/head/223.bmp
-
img/head/224.bmp
-
img/head/225.bmp
-
img/head/226.bmp
-
img/head/227.bmp
-
img/head/228.bmp
-
img/head/229.bmp
-
img/head/230.bmp
-
img/head/231.bmp
-
img/head/232.bmp
-
img/head/233.bmp
-
img/head/234.bmp
-
img/head/235.bmp
-
img/head/236.bmp
-
img/head/237.bmp
-
img/head/238.bmp
-
img/head/config.ini
-
img/head/room_host.bmp
-
img/head/room_sec_host.bmp
-
img/level/0.bmp
-
img/level/1.bmp
-
img/level/2.bmp
-
img/level/3.bmp
-
img/level/4.bmp
-
img/level/5.bmp
-
img/level/6.bmp
-
img/level/7.bmp
-
img/level/8.bmp
-
img/level/9.bmp
-
img/splash.jpg
-
img/videobg/big.jpg
-
img/videobg/close_video.jpg
-
img/videobg/config.ini
-
img/videobg/default.jpg
-
img/videobg/default2.jpg
-
img/videobg/forbid_video.jpg
-
img/videobg/middle.jpg
-
img/videobg/open_video.jpg
-
img/videobg/small.jpg
-
lame_enc.dll
b13a1d0fe939cb5e5402eee3eb2398d6
Headers
Imports
Exports
Sections
-
loveLiaoClient.exe
4d2ccf71802bc7f15270952b0cca2aa7
Headers
Imports
Exports
Sections
-
loveLiaoUpdate2.exe
f5760cf6919ea7218330190a3c0959ef
Headers
Imports
Sections
-
pthreadGC2.dll
4ed4b97c004af0f3c95aeb69c247d60b
Headers
Imports
Exports
Sections
-
skin/default/Hall_Default.dll
Headers
Sections
-
skin/default/Pri_Default.dll
Headers
Sections
-
skin/default/Pub_Default.dll
Headers
Sections
-
skin/default/config.ini
-
skin/public/alarm/bg.bmp
-
skin/public/alarm/cancel.bmp
-
skin/public/alarm/cancel_active.bmp
-
skin/public/alarm/ok.bmp
-
skin/public/alarm/ok_active.bmp
-
skin/public/alarm/skin.ini
-
skin/public/dialog/bg.bmp
-
skin/public/dialog/cancel.bmp
-
skin/public/dialog/cancel_active.bmp
-
skin/public/dialog/createroom.ini
-
skin/public/dialog/freeze.ini
-
skin/public/dialog/kick.ini
-
skin/public/dialog/ok.bmp
-
skin/public/dialog/ok_active.bmp
-
skin/public/dialog/payment.ini
-
skin/public/dialog/prichatsubmit.ini
-
skin/public/dialog/requestchat.ini
-
skin/public/gift/bg.bmp
-
skin/public/gift/cancel.bmp
-
skin/public/gift/cancel_active.bmp
-
skin/public/gift/gift.ini
-
skin/public/gift/ok.bmp
-
skin/public/gift/ok_active.bmp
-
skin/public/glass/bg.bmp
-
skin/public/glass/bg2.bmp
-
skin/public/glass/skin.ini
-
skin/public/glass/skin2.ini
-
skin/public/login/bg.bmp
-
skin/public/login/cancel.bmp
-
skin/public/login/cancel_active.bmp
-
skin/public/login/login.bmp
-
skin/public/login/login_active.bmp
-
skin/public/login/login_cancel.bmp
-
skin/public/login/login_cancel_active.bmp
-
skin/public/login/login_register.bmp
-
skin/public/login/login_register_active.bmp
-
skin/public/login/skin.ini
-
skin/public/rename/bg.bmp
-
skin/public/rename/cancel.bmp
-
skin/public/rename/cancel_active.bmp
-
skin/public/rename/ok.bmp
-
skin/public/rename/ok_active.bmp
-
skin/public/rename/skin.ini
-
skin/public/response/bg.bmp
-
skin/public/response/cancel.bmp
-
skin/public/response/cancel_active.bmp
-
skin/public/response/ok.bmp
-
skin/public/response/ok_active.bmp
-
skin/public/response/skin.ini
-
skin/public/response/skin2.ini
-
skin/public/response/skin3.ini
-
skin/public/userinfo/skin.ini
-
swscale.dll
4e404d529fb415e5e1a29e1ff94df66a
Headers
Imports
Exports
Sections
-
vidrender3.ax
b8f0ff0c1f683b89d593e57553b69551
Headers
Imports
Exports
Sections
-
xvid2.ax
9e4f2da6269a0445e1b6e1be13ba4ef2
Headers
Imports
Exports
Sections
-
xvidcore.dll
bf634c8fcfe369e96e3d54d8dfe57275
Headers
Imports
Exports
Sections
-
xvidenc2.ax
050abd7857da98dc0c0602406a7b6091
Headers
Imports
Exports
Sections