Overview

overview

7

Static

static

3

ce7142c2b9...18.exe

windows7-x64

7

ce7142c2b9...18.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

CCTrans.dll

windows7-x64

3

CCTrans.dll

windows10-2004-x64

3

DTDJ_1.exe

windows7-x64

3

DTDJ_1.exe

windows10-2004-x64

3

Info MF.exe

windows7-x64

7

Info MF.exe

windows10-2004-x64

7

Mario Forever.exe

windows7-x64

7

Mario Forever.exe

windows10-2004-x64

7

SFTrans.dll

windows7-x64

3

SFTrans.dll

windows10-2004-x64

3

STrans.dll

windows7-x64

3

STrans.dll

windows10-2004-x64

3

bass.dll

windows7-x64

3

bass.dll

windows10-2004-x64

3

cncs232.dll

windows7-x64

3

cncs232.dll

windows10-2004-x64

3

dat/m_gi.dll

windows7-x64

3

dat/m_gi.dll

windows10-2004-x64

3

ktkm1.dll

windows7-x64

1

ktkm1.dll

windows10-2004-x64

1

ktkm10.dll

windows7-x64

1

ktkm10.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    ce7142c2b9fb8f7a567713e08b48c523_JaffaCakes118

  • Size

    18.6MB

  • MD5

    ce7142c2b9fb8f7a567713e08b48c523

  • SHA1

    c9c0b23c1633d38b2dbe1289fb23ca5738d4d423

  • SHA256

    946706b33fb434f5addc9eee5fb1d85f5df97230a789a2049ffcf5df8783c84f

  • SHA512

    0274c672f15cc866c75056eb2cf2cfeea6fbacd765751a27780c35f33688976da9623b7a35953f6ce7c283155aa94547301707263d4f15d49f32f973b136a4c7

  • SSDEEP

    393216:N7VnSIEpTc5PfEKCoTBMwz4vndpOjO2hEEvEhGGtR2pdbHuu29m5Ika2Cm+aY2mn:NZSIEpT2PNCoPz4FpQpvCL2pJHuf9bkC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • ce7142c2b9fb8f7a567713e08b48c523_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    711c893e4d8189fd14b6563a4e35e663


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    946eb0a1e85c9ade4acaf634eb5a64f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • CCTrans.dll
    .dll windows:4 windows x86 arch:x86

    10545e3d9f5f054bb4a2b27c3763c670


    Headers

    Imports

    Exports

    Sections

  • DTDJ_1.exe
    .exe windows:5 windows x86 arch:x86

    4dbc5d08df28b8f55d5238d42ee67fa8


    Headers

    Imports

    Sections

  • Info MF.exe
    .exe windows:4 windows x86 arch:x86

    11787f155bff119bee66539bc09ae40b


    Headers

    Imports

    Sections

  • Main_dtdj.ini
  • Mario Forever.exe
    .exe windows:4 windows x86 arch:x86

    11787f155bff119bee66539bc09ae40b


    Headers

    Imports

    Sections

  • SFTrans.dll
    .dll windows:4 windows x86 arch:x86

    b844aca305be84d8acb53aa80bc52cec


    Headers

    Imports

    Exports

    Sections

  • STrans.dll
    .dll windows:4 windows x86 arch:x86

    1f74463f05f440b9331f124ef05786b3


    Headers

    Imports

    Exports

    Sections

  • bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • cncs232.dll
    .dll windows:4 windows x86 arch:x86

    e6a9e5411c12180afc2b640ad3ee7da4


    Headers

    Imports

    Exports

    Sections

  • dat/m_gi.dll
    .dll windows:4 windows x86 arch:x86

    aa76d1d181494666a3338cea602a4c9f


    Headers

    Imports

    Exports

    Sections

  • forevermopt.INI
  • icoinst.bmp
  • ktkm1.dll
  • ktkm10.dll
  • ktkm11.dll
  • ktkm12.dll
  • ktkm13.dll
  • ktkm14.dll
  • ktkm15.dll
  • ktkm16.dll
  • ktkm17.dll
  • ktkm18.dll
  • ktkm19.dll
  • ktkm2.dll
  • ktkm20.dll
  • ktkm21.dll
  • ktkm22.dll
  • ktkm23.dll
  • ktkm24.dll
  • ktkm25.dll
  • ktkm26.dll
  • ktkm27.dll
  • ktkm28.dll
  • ktkm29.dll
  • ktkm3.dll
  • ktkm30.dll
  • ktkm31.dll
  • ktkm32.dll
  • ktkm33.dll
  • ktkm34.dll
  • ktkm35.dll
  • ktkm36.dll
  • ktkm37.dll
  • ktkm38.dll
  • ktkm39.dll
  • ktkm4.dll
  • ktkm5.dll
  • ktkm6.dll
  • ktkm7.dll
  • ktkm8.dll
  • ktkm9.dll
  • leftinst.bmp
  • mafosav.INI
  • mus/arhi.INI
  • mus/mus_pos.INI
  • rubberovine.dll
    .dll windows:4 windows x86 arch:x86

    90e079ddb72dcf71a13b50f05bcca280


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • Զij(Mario Forever).url