General

  • Target

    dbc9eb425c6810a1e0ad96c20e7edddd_JaffaCakes118

  • Size

    4.8MB

  • MD5

    dbc9eb425c6810a1e0ad96c20e7edddd

  • SHA1

    dae47c46f65dfaec973a2030eb524c99245d1904

  • SHA256

    075d107edadbc47f68a586b29247db7863b3da80c344df76e9c80b7db049e793

  • SHA512

    5d0b7a70b03ad1d079bee0b6d29cc8f30767a3cffe0ff2a28bfcf96d0e110fa393f0ae28a9e866a79c2d74f1036046194c7be1f1b743f18ef9f10acbb680fab7

  • SSDEEP

    98304:ITD6X2qvzbu3Mw8X2ixNe5nkg25WeO52C/ibCGPRrC9PGAge8:WCJvzbVw8X2iM5MWeO52S99PGp/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • dbc9eb425c6810a1e0ad96c20e7edddd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/checkbox1.bmp
  • $PLUGINSDIR/checkbox2.bmp
  • $PLUGINSDIR/close.bmp
  • $PLUGINSDIR/custom.bmp
  • $PLUGINSDIR/finish.bmp
  • $PLUGINSDIR/install.bmp
  • $PLUGINSDIR/install_step1.bmp
  • $PLUGINSDIR/install_step2.bmp
  • $PLUGINSDIR/install_step3.bmp
  • $PLUGINSDIR/loading1.bmp
  • $PLUGINSDIR/loading2.bmp
  • $PLUGINSDIR/return.bmp
  • 1vs1AVModule.xml
    .xml
  • 1vs1BAVModule.xml
    .xml
  • 1vs1SAVModule.xml
    .xml
  • 9158AVCore2.dll
    .dll windows:4 windows x86 arch:x86

    be9da2191c5d4dda64a50a71ca738e0d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 9158KTVPlayer.exe
    .exe windows:4 windows x86 arch:x86

    9cafa0c733e0cae9197ea1d3b35bcf76


    Code Sign

    Headers

    Imports

    Sections

  • 9158VCComm.dll
    .dll windows:4 windows x86 arch:x86

    8bee02b8e1f0aca7d2a819f4fbb924ad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AVModule176.xml
    .xml
  • AVModule320.xml
    .xml
  • AVModule320_Private.xml
    .xml
  • AVModule640.xml
    .xml
  • AVPhoneModule.xml
    .xml
  • AVPhoneModuleNew.xml
    .xml
  • Banner.xml
    .xml
  • BugReport.exe
    .exe windows:4 windows x86 arch:x86

    bcb0747c39b5fe50e054c3276e18b072


    Code Sign

    Headers

    Imports

    Sections

  • ChatRichEdit.dll
    .dll windows:5 windows x86 arch:x86

    90636339e1426a6f427f6bf2f30da0d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DDVCtrlLib.dll
    .dll windows:4 windows x86 arch:x86

    3f664f110b12b93a79332cf1c0182a6f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DDVEC.dll
    .dll windows:4 windows x86 arch:x86

    ca5fb99e980e62a1857a755349a73a5c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DownLoad.exe
    .exe windows:4 windows x86 arch:x86

    050e27cd4d6ca90ab2b893bf70980901


    Code Sign

    Headers

    Imports

    Sections

  • DynamicEffects.dll
    .dll windows:4 windows x86 arch:x86

    37cea95f6dea791978bd896a2fdf7833


    Headers

    Imports

    Exports

    Sections

  • Guide1.xml
    .xml
  • Guide2.xml
    .xml
  • HallClose.ini
  • HardwareINFO.dll
    .dll windows:4 windows x86 arch:x86

    570615494ffe12a103b26a890a6a82d0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • IMClient.dll
    .dll windows:4 windows x86 arch:x86

    a0be5123ef50ba3757edf484cfeaedff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • IdleTrac.dll
    .dll windows:4 windows x86 arch:x86

    263c12a197d3bb2ac758eba4a39da260


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ImageOle.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    44660346896afa7fcf9a9e309322676b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ItemVer.xml
    .xml
  • KillProcess.exe
    .exe windows:4 windows x86 arch:x86

    a24455875a598b8ba572823d93757c31


    Code Sign

    Headers

    Imports

    Sections

  • MultiChatGuest.dll
    .dll windows:4 windows x86 arch:x86

    0426d11b95ae5c6c7785aed7bbc5acd0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MultiChatKTV.dll
    .dll windows:4 windows x86 arch:x86

    e1d038c4fb68c3fb0b8b045def5d3323


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MultiChatKTV3.dll
    .dll windows:4 windows x86 arch:x86

    a8b672a59ea92c75fce5e761d2c1ee20


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MultiChatKTV6.dll
    .dll windows:4 windows x86 arch:x86

    f947144efc164dfe710de58cbd2133f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MultiChatKTV8.dll
    .dll windows:4 windows x86 arch:x86

    9546a34f59839479812ba988c86eed5c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MultiTenRoom.dll
    .dll windows:4 windows x86 arch:x86

    75b835223c48abfb0e5ea84d00bd9a1d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SockClient.dll
    .dll windows:4 windows x86 arch:x86

    cb60030ac34733f9d54bf7fb6ca76574


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • active.ini
  • allplat.xml
  • broadcastchat.xml
    .xml
  • car.xml
    .xml
  • car_in.txt
  • carimage/defaultcar.png
    .png
  • chat.xml
    .xml
  • chatQK.xml
    .xml
  • client.xml
  • face/0.gif
    .gif
  • file.txt
  • filnick.xml
    .xml
  • filter.xml
    .xml
  • help.xml
    .xml
  • item/2_6.gif
    .gif
  • item/itemconfig.xml
  • libfaac_dll.dll
    .dll windows:6 windows x86 arch:x86

    f78bd506dabc0cbe6420d85541776a6a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libfaad2_dll.dll
    .dll windows:6 windows x86 arch:x86

    813f63d63f087a389b103272be789261


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lobby.ini
  • mfc100u.dll
    .dll windows:5 windows x86 arch:x86

    bd8b4b626cddac3b44f6c27ca0683f8e


    Headers

    Imports

    Sections

  • seal/1.bmp
  • seal/itemconfig.xml