Overview

overview

7

Static

static

3

d1c150319f...18.exe

windows7-x64

7

d1c150319f...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDIR/btag.dll

windows7-x64

3

$PLUGINSDIR/btag.dll

windows10-2004-x64

3

DaVincisGold.exe

windows7-x64

7

DaVincisGold.exe

windows10-2004-x64

7

Loader.exe

windows7-x64

1

Loader.exe

windows10-2004-x64

3

unicows.dll

windows7-x64

3

unicows.dll

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    d1c150319f61ad98e42d43d8c1ddaa16_JaffaCakes118

  • Size

    5.3MB

  • MD5

    d1c150319f61ad98e42d43d8c1ddaa16

  • SHA1

    34b7ce828bce74fe0d2155f8aaa99032e33b9ce6

  • SHA256

    e63c78068450a39a486d3f9e93fdcde8574bd0b8623df67c598dbef3aeac780f

  • SHA512

    5651b9b5b48c8abbb039b3e4dcbc6f921c616ab63e1a7df28bb84bf380f04dba4203cc865cfd026c5192b081b6fe2e044e0428c18716b31c3e3ccf8eb015383d

  • SSDEEP

    98304:M2JxayCGq5j2jXJ5Z5Kcw+YKubXqG3Bl2maTk2iK7AYok3LvBDGtU+YT:1Jlq5j2V5Ztw+Y7rqGv2maTk9K7qwXh

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • d1c150319f61ad98e42d43d8c1ddaa16_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1dba24346e415c53ffa8a8a260a9f47e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    48cfa0ea7e353e4a7dd23572da8374ef


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/btag.dll
    .dll windows:4 windows x86 arch:x86

    301d69c4c2a330e6c5b27536954310e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • DaVincisGold.exe
    .exe windows:4 windows x86 arch:x86

    1dbcf2c6cdfb8812f5650277b7998cf3


    Headers

    Imports

    Sections

  • Loader.exe
    .exe windows:4 windows x86 arch:x86

    046aab91abaf21a4aa4af5ba09b6c737


    Headers

    Imports

    Sections

  • commonInclude.swf
  • config/config.xml
  • gameThumbs/thumb_3CardPoker.swf
  • gameThumbs/thumb_7andBar.swf
  • gameThumbs/thumb_ATRT.swf
  • gameThumbs/thumb_AcesFaces.swf
  • gameThumbs/thumb_AmerRoul.swf
  • gameThumbs/thumb_AtomicAge.swf
  • gameThumbs/thumb_Baccarat.swf
  • gameThumbs/thumb_BigCash.swf
  • gameThumbs/thumb_Blackjack.swf
  • gameThumbs/thumb_CaribbStud.swf
  • gameThumbs/thumb_CashCow.swf
  • gameThumbs/thumb_ChickenLittle.swf
  • gameThumbs/thumb_Craps.swf
  • gameThumbs/thumb_DeuceJoker.swf
  • gameThumbs/thumb_DeucesWild.swf
  • gameThumbs/thumb_DoubleJoker.swf
  • gameThumbs/thumb_Emergency.swf
  • gameThumbs/thumb_EuroRoul.swf
  • gameThumbs/thumb_FanFruit.swf
  • gameThumbs/thumb_FleaMarket.swf
  • gameThumbs/thumb_GoldRush.swf
  • gameThumbs/thumb_Grandmas.swf
  • gameThumbs/thumb_Hobos.swf
  • gameThumbs/thumb_Jokerpoker.swf
  • gameThumbs/thumb_JorB.swf
  • gameThumbs/thumb_Keno.swf
  • gameThumbs/thumb_LetItRide.swf
  • gameThumbs/thumb_MetalDetect.swf
  • gameThumbs/thumb_PaiGow.swf
  • gameThumbs/thumb_RedDog.swf
  • gameThumbs/thumb_ReelCrime.swf
  • gameThumbs/thumb_ReelCrime2.swf
  • gameThumbs/thumb_ReelOfFortune.swf
  • gameThumbs/thumb_ScratchCard.swf
  • gameThumbs/thumb_SicBo.swf
  • gameThumbs/thumb_So80s.swf
  • gameThumbs/thumb_SpyGame.swf
  • gameThumbs/thumb_SurfParadise.swf
  • gameThumbs/thumb_TorB.swf
  • gameThumbs/thumb_War.swf
  • games/LoadingScreen.swf
  • icon.ico
  • promoManager.swf
  • unicows.dll
    .dll windows:5 windows x86 arch:x86

    628730441f2453f40c61ce661f08e0ca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    1dba24346e415c53ffa8a8a260a9f47e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    2db813254ea8b4d2a92d703ecb659f39


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    48cfa0ea7e353e4a7dd23572da8374ef


    Headers

    Imports

    Exports

    Sections