General

  • Target

    da3108c120f5efd5fe223e80a410a78f_JaffaCakes118

  • Size

    30.8MB

  • MD5

    da3108c120f5efd5fe223e80a410a78f

  • SHA1

    ff043c8062fa51abe4d64eccaf8dde32751f4e07

  • SHA256

    a183908cf798e0e3e57ca2126a1b0a5d91d8db127e7a18b2aa603e2a6c94860d

  • SHA512

    4c0ebd1d020d4e266acb31f4c983de56fc76ea8cbefd713c9ccd672dee278013bd558662ae10e993bff12d613ebfc80f9bfb20003867af03a1de07e9cc55839b

  • SSDEEP

    786432:CWlvwNungzi/05+ebpHoDsXuun+EgNjIOBNNeYktve1+PK:CEvp3/heimuaCMOm3PK

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 31 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • da3108c120f5efd5fe223e80a410a78f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MyNsisExtend.dll
    .dll windows:4 windows x86 arch:x86

    9cb11d0d4bed69c64ae8d0549b4ce4ce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/locate.dll
    .dll windows:4 windows x86 arch:x86

    7f8181c74f882a780c7cd485241e8b51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRandom.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_89_/GMSkin_Image_2012_v1.zip
    .zip
  • skin.xml
  • skin/Thumbs.db
  • skin/icon1.png
    .png
  • skin/保存目录.png
    .png
  • skin/关闭.png
    .png
  • skin/协议背景.png
    .png
  • skin/卸载背景.png
    .png
  • skin/图片背景框.png
    .png
  • skin/多选.png
    .png
  • skin/安装.png
    .png
  • skin/安装01.png
    .png
  • skin/安装02.png
    .png
  • skin/安装03.png
    .png
  • skin/安装04.png
    .png
  • skin/安装05.png
    .png
  • skin/安装协议.png
    .png
  • skin/安装完成.png
    .png
  • skin/安装完成按钮.png
    .png
  • skin/完成.png
    .png
  • skin/广告关闭.png
    .png
  • skin/按钮.png
    .png
  • skin/最小化.png
    .png
  • skin/最小化2.png
    .png
  • skin/格子.png
    .png
  • skin/欢迎.png
    .png
  • skin/浏览.png
    .png
  • skin/游戏弹出.png
    .png
  • skin/软件弹出.png
    .png
  • skin/进度条.png
    .png
  • skin/进度条背景.png
    .png
  • skin/选项.png
    .png
  • skin/默认背景.png
    .png
  • $TEMP/$_89_/MyNsisSkin.dll
    .dll windows:4 windows x86 arch:x86

    8b2c18b411d31cbef33f61e5be07509a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_89_/config.dat
  • $TEMP/$_89_/game.jpg
    .jpg
  • ExeConfig.ini
  • Game.dat
    .exe windows:4 windows x86 arch:x86

    10f24d5b4fc0cac2bccbb62e23b1e3ef


    Headers

    Imports

    Sections

  • Game.exe
    .exe windows:4 windows x86 arch:x86

    55b704ba89ea9ab3b99cc7dc45bebf96


    Headers

    Imports

    Sections

  • ailogic.dll
    .dll windows:4 windows x86 arch:x86

    9b0104dac7b93bf30182648e92279090


    Headers

    Imports

    Exports

    Sections

  • anim.dll
    .dll windows:4 windows x86 arch:x86

    f70fde6080e565d4d5ba682434ebab6e


    Headers

    Imports

    Exports

    Sections

  • binkw32.dll
    .dll windows:4 windows x86 arch:x86

    4458f6641e5cfc53da1a81b501997305


    Headers

    Imports

    Exports

    Sections

  • bugslay.dll
    .dll windows:4 windows x86 arch:x86

    1184fe2d61bcdf017853791ccbff6d83


    Headers

    Imports

    Exports

    Sections

  • config.cfg
    .xml
  • data/data.pak
  • defconf.cfg
    .xml
  • fmod.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • game.ico
  • gamett.dll
    .dll windows:4 windows x86 arch:x86

    fdcdc49b62d71005536db5b40c287b8d


    Headers

    Imports

    Exports

    Sections

  • gfx.dll
    .dll windows:4 windows x86 arch:x86

    2eae9d8a9e5b00e1944e43a19671f5ad


    Headers

    Imports

    Exports

    Sections

  • image.dll
    .dll windows:4 windows x86 arch:x86

    c1211a6185a62884e3774085d15ec20c


    Headers

    Imports

    Exports

    Sections

  • input.dll
    .dll windows:4 windows x86 arch:x86

    723ad93bf0869796b16cc46cfca6a465


    Headers

    Imports

    Exports

    Sections

  • install.sss
    .js
  • mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1557eebc6134cee9eb9d0583a2b40341


    Headers

    Imports

    Exports

    Sections

  • msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    1b1839992700df52b049b87961a724e3


    Headers

    Imports

    Exports

    Sections

  • msvcrt.dll
    .dll windows:4 windows x86 arch:x86

    799e28bcbf4e94ca50e4b0a2c283ab7d


    Headers

    Imports

    Exports

    Sections

  • net.dll
    .dll windows:4 windows x86 arch:x86

    244b33d4fa6fc987b0965e392e1f5995


    Headers

    Imports

    Exports

    Sections

  • res.bat
  • reschange.exe
    .exe windows:4 windows x86 arch:x86

    68a078f98f92f4da4736fc5da74f3feb


    Headers

    Imports

    Sections

  • scene.dll
    .dll windows:4 windows x86 arch:x86

    2687cb27b9f8409cb358cefc7f6145e8


    Headers

    Imports

    Exports

    Sections

  • sfx.dll
    .dll windows:4 windows x86 arch:x86

    6194ca2ed88ed97397b0db25f171c8e6


    Headers

    Imports

    Exports

    Sections

  • streamio.dll
    .dll windows:4 windows x86 arch:x86

    0ec5baaa8bb10acfb3254ce99ce857e1


    Headers

    Imports

    Exports

    Sections

  • ui.dll
    .dll windows:4 windows x86 arch:x86

    9b122ac5cafa7f06a7f5c111852fdbfe


    Headers

    Imports

    Exports

    Sections

  • ʼϷ.exe
    .exe windows:4 windows x86 arch:x86

    db14222dff4ad9d88d8e8a3d01d8328c


    Headers

    Imports

    Exports

    Sections