General

  • Target

    d57fc7ef4f9e0b3affd8fa7e077fb40f_JaffaCakes118

  • Size

    5.4MB

  • MD5

    d57fc7ef4f9e0b3affd8fa7e077fb40f

  • SHA1

    a80398d50f66aa4e226f9e762455235d674c0de5

  • SHA256

    56b07ed660a5c078633c4944dfdd1359a39b170c8e0bc4f507cba8a466ea52e5

  • SHA512

    c7938c70bfdc2451ee282b8e7c14f7c64196ba0c319b1c55bd421cef245f11e7c5f6cd7d96048e3fa1c12b1757e51199e7fd42866b64455693656ece584fb740

  • SSDEEP

    98304:77fL5bnaRngcYYZjnMKQ7agiop6HViU42ENpWefzNeIdZd7iMsoqGBS6txDS1T9U:PfLNnaYYZTRgikk8IEWe7NeHMsFQJtx1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 40 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • d57fc7ef4f9e0b3affd8fa7e077fb40f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    1ba6926a1ee4e4cda118768081f528d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/blowfish.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • MSVCP71.DLL
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • MSVCR71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • _hashlib.pyd
    .dll windows:4 windows x86 arch:x86

    5b469f947d2bb55e8024ec6c64a4dccd


    Headers

    Imports

    Exports

    Sections

  • _socket.pyd
    .dll .js windows:4 windows x86 arch:x86 polyglot

    d1ae6d722ba3f3406643b1bdd0a8033a


    Headers

    Imports

    Exports

    Sections

  • _sqlite3.pyd
    .dll windows:4 windows x86 arch:x86

    423e772b74ccd75bcac641785712a75f


    Headers

    Imports

    Exports

    Sections

  • _ssl.pyd
    .dll windows:4 windows x86 arch:x86

    ba6c6f3b1df67b28d075f9c0d95d4504


    Headers

    Imports

    Exports

    Sections

  • _win32sysloader.pyd
    .dll windows:4 windows x86 arch:x86

    a79daf21df185165e141189dec77d565


    Headers

    Imports

    Exports

    Sections

  • bz2.pyd
    .dll windows:4 windows x86 arch:x86

    9dc1e60865a09b987249307fe051b644


    Headers

    Imports

    Exports

    Sections

  • config.ini
  • configure.xml
  • duduyouxi.exe
    .exe windows:4 windows x86 arch:x86

    982de54d12c39d089abdb53c89386075


    Headers

    Imports

    Sections

  • icon.ico
  • icon_update.ico
  • mcyyouxi.ini
  • pyexpat.pyd
    .dll windows:4 windows x86 arch:x86

    b44f6d4416301af815dbeee260255e4b


    Headers

    Imports

    Exports

    Sections

  • python25.dll
    .dll windows:4 windows x86 arch:x86

    c95ffe1c5c0fb3e98b1b03977ef3bab5


    Headers

    Imports

    Exports

    Sections

  • pywintypes25.dll
    .dll windows:4 windows x86 arch:x86

    63c3803e704d233aff4f88e99b42cccc


    Headers

    Imports

    Exports

    Sections

  • save/game.db
  • save/game_ext.db
  • select.pyd
    .dll windows:4 windows x86 arch:x86

    b08e48e1a21ea42637fcaf43bd5b2698


    Headers

    Imports

    Exports

    Sections

  • skin/btn0.png
    .png
  • skin/btn1.png
    .png
  • skin/btn2.png
    .png
  • skin/btn3.png
    .png
  • skin/btn4.png
    .png
  • skin/btn5.png
    .png
  • skin/btn6.png
    .png
  • skin/btn7a.png
    .png
  • skin/btn7b.png
    .png
  • skin/btn8.png
    .png
  • skin/btn9.png
    .png
  • sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    2195332d504ebf111f526b686de7f3e9


    Headers

    Imports

    Exports

    Sections

  • tasklist.exe
    .exe windows:5 windows x86 arch:x86

    fb207d3860c1e608ed020ccb4a9f9aef


    Headers

    Imports

    Sections

  • tpl/1.sol
  • tpl/2.sol
  • tpl/9-1.sol
  • tpl/9-2.sol
  • tpl/bbs.html
    .html
  • tpl/bg_blue.gif
    .gif
  • tpl/bg_green.gif
    .gif
  • tpl/book.xsl
    .xml
  • tpl/empty.html
    .html
  • tpl/img/btbg.gif
    .gif
  • tpl/img/foot.gif
    .gif
  • tpl/img/head.gif
    .gif
  • tpl/img/leftbt.gif
    .gif
  • tpl/img/music.gif
    .gif
  • tpl/img/tree/1.gif
    .gif
  • tpl/img/tree/2.gif
    .gif
  • tpl/img/tree/3.gif
    .gif
  • tpl/img/tree/L0.gif
    .gif
  • tpl/img/tree/L1.gif
    .gif
  • tpl/img/tree/L2.gif
    .gif
  • tpl/img/tree/L4.gif
    .gif
  • tpl/img/tree/L5.gif
    .gif
  • tpl/img/tree/M0.gif
    .gif
  • tpl/img/tree/M1.gif
    .gif
  • tpl/img/tree/M2.gif
    .gif
  • tpl/img/tree/P0.gif
    .gif
  • tpl/img/tree/P1.gif
    .gif
  • tpl/img/tree/P2.gif
    .gif
  • tpl/js/ajax.js
    .js
  • tpl/js/cookie.js
    .js
  • tpl/js/data.tpl.js
    .js
  • tpl/js/historyData.js
    .js
  • tpl/js/nosound.swf
  • tpl/js/sound.swf
  • tpl/js/tagData.js
    .js
  • tpl/js/tree.js
    .js
  • tpl/js/treeData.js
    .js
  • tpl/js/userinfo.js
    .js
  • tpl/left.html
    .html .js polyglot
  • tpl/left_if.html
    .html .js polyglot
  • tpl/list.bmp
  • tpl/loading.html
    .html
  • tpl/loading3.gif
    .gif
  • tpl/login.html
    .html .js polyglot
  • tpl/main.html
    .html .js polyglot
  • tpl/ocxloading.js
    .js
  • tpl/play.html
    .html .js polyglot
  • tpl/rowsInit.js
    .js
  • tpl/setup.html
    .html
  • tpl/solmgr.html
    .html .js polyglot
  • tpl/song.html
    .html
  • tpl/tab.css
  • tpl/tab.js
    .js
  • tpl/tree.html
    .html .js polyglot
  • tpl/tree_history.html
    .html .js polyglot
  • tpl/update.ini
  • tpl/update.time
  • tskill.exe
    .exe windows:5 windows x86 arch:x86

    ead04e37eebc34f4b490f34105609310


    Headers

    Imports

    Sections

  • unicodedata.pyd
    .dll windows:4 windows x86 arch:x86

    9ba4f8f04306eb180330a8ad0c78458f


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • up.ini
  • update/autoup.ini
  • update/autoup_new.ini
  • user.ini
  • w9xpopen.exe
    .exe windows:4 windows x86 arch:x86

    3fa43cf6494afaa362b5996b590f5baa


    Headers

    Imports

    Sections

  • win32file.pyd
    .dll windows:4 windows x86 arch:x86

    1c9a91c62035d579bccf7975fae04d4d


    Headers

    Imports

    Exports

    Sections

  • wx._activex.pyd
    .dll windows:4 windows x86 arch:x86

    5b7ab120952f8f7a43919c33cf25fe8b


    Headers

    Imports

    Exports

    Sections

  • wx._aui.pyd
    .dll windows:4 windows x86 arch:x86

    fafd4abf79cb39a2276ae701cec6ebca


    Headers

    Imports

    Exports

    Sections

  • wx._controls_.pyd
    .dll windows:4 windows x86 arch:x86

    e82cfc2655b5549596781906da28d676


    Headers

    Imports

    Exports

    Sections

  • wx._core_.pyd
    .dll windows:4 windows x86 arch:x86

    98f57acac6d0f9d486c8d347ec2335dc


    Headers

    Imports

    Exports

    Sections

  • wx._gdi_.pyd
    .dll windows:4 windows x86 arch:x86

    714f4756fb0d45646d50da217ce1bd54


    Headers

    Imports

    Exports

    Sections

  • wx._misc_.pyd
    .dll windows:4 windows x86 arch:x86

    fbda22910e67af60cb258ac17036a9c3


    Headers

    Imports

    Exports

    Sections

  • wx._windows_.pyd
    .dll windows:4 windows x86 arch:x86

    d37a4aba5126deafc32e30a2e8862f14


    Headers

    Imports

    Exports

    Sections

  • wxbase28uh_net_vc.dll
    .dll windows:4 windows x86 arch:x86

    46c796d13b8c04f320c8328fb4aeba7c


    Headers

    Imports

    Exports

    Sections

  • wxbase28uh_vc.dll
    .dll windows:4 windows x86 arch:x86

    2e6ce5863eebe40a2b16ece9d89e8d12


    Headers

    Imports

    Exports

    Sections

  • wxmsw28uh_adv_vc.dll
    .dll windows:4 windows x86 arch:x86

    42509d4b57300931c7e16e50398f845d


    Headers

    Imports

    Exports

    Sections

  • wxmsw28uh_aui_vc.dll
    .dll windows:4 windows x86 arch:x86

    58dfddb8d9ecae7666fbe71413240487


    Headers

    Imports

    Exports

    Sections

  • wxmsw28uh_core_vc.dll
    .dll windows:4 windows x86 arch:x86

    3452ef264672a1ca2dfe33d6dfb9a048


    Headers

    Imports

    Exports

    Sections

  • wxmsw28uh_html_vc.dll
    .dll windows:4 windows x86 arch:x86

    05eaf86a6262eb4a53f5c9b823f830b8


    Headers

    Imports

    Exports

    Sections

  • Ϸгԭ򼰽.txt