General

  • Target

    041f79eb438265c3a9c43c07138e0b3f_JaffaCakes118

  • Size

    8.5MB

  • MD5

    041f79eb438265c3a9c43c07138e0b3f

  • SHA1

    24498df100780b3657066757ddb4ae11f2c9bef1

  • SHA256

    77b02f1b72be8f6223efee61089d98af67a5f39713d30fa65e8dd70f15fd0ca5

  • SHA512

    7eed36a4e2647b33fdfad43fc02c65c205abb834759347e38fbc6691705872722fb39c3eb80a0f6dce9c29305f4da402387b49fd3267114b426d3efa6966e818

  • SSDEEP

    196608:RFGSckvk7ZKLdZIksJXMu+ML5SxcsctOaMks:RFG1ZwLdHsmu+MkxKtObr

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 041f79eb438265c3a9c43c07138e0b3f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/DefCamSetup-English.ini
  • $PLUGINSDIR/DefCamSetup-Simpchinese.ini
  • $PLUGINSDIR/DefCamSetup-Tradchinese.ini
  • $PLUGINSDIR/DefCamSetup.dll
    .dll windows:4 windows x86 arch:x86

    0843fc35a546e4ff989f2c0b0f345e69


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GGExit.exe
    .exe windows:4 windows x86 arch:x86

    eedec5ce5c99c872622f21ddf098d820


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Dance/AudioCapture.dll
    .dll windows:4 windows x86 arch:x86

    762b13b876a54f52c249939b179810a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/AudioCodec1.dll
    .dll windows:4 windows x86 arch:x86

    f8410c3dce8c223672198bb8cd34c429


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/AudioCodec2.dll
    .dll windows:4 windows x86 arch:x86

    f6b9b7f76f67521152057b9e22b48c89


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/AudioCodec3.dll
    .dll windows:4 windows x86 arch:x86

    73b8553e8adb7e658ef50d0961c5b298


    Code Sign

    Headers

    Imports

    Sections

  • Dance/ChatHall.exe
    .exe windows:4 windows x86 arch:x86

    1155bcea1fec2d35bba3d721ec9059e1


    Code Sign

    Headers

    Imports

    Sections

  • Dance/ChatHall.ini
  • Dance/ChatRoom/ChatRoomClient.dll
    .dll windows:4 windows x86 arch:x86

    43219421f7e03ea7c5c5c1d9170eb26b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/ChatRoomUI.dll
    .dll windows:4 windows x86 arch:x86

    3ae1814a776a08fcba0e46f56a2a1c74


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/Config.ini
  • Dance/ChatRoom/Skin/2010beta1ChatRoom.ggs
  • Dance/ChatRoom/Skin/Alarm.png
    .png
  • Dance/ChatRoom/Skin/DefFace.bmp
  • Dance/ChatRoom/Skin/Thumbs.db
  • Dance/ChatRoom/Skin/VideoBack.bmp
  • Dance/ChatRoom/Skin/VideoBack2.bmp
  • Dance/ChatRoom/Skin/WndBack.bmp
  • Dance/ChatRoom/UIToolTip.dll
    .dll windows:4 windows x86 arch:x86

    04897ae99bc29616991912ca68521429


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/VcrMediaLib.dll
    .dll windows:4 windows x86 arch:x86

    88f0a5851aeb776bfe708c48f2849d2e


    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/VolumeCtrl.dll
    .dll windows:5 windows x86 arch:x86

    9f214f5ff27e25a36acb6f280f58f6be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ChatRoom/data/FlowerData.dat
  • Dance/ChatRoom/plug_folder_focus.bmp
  • Dance/ChatRoom/plug_folder_normal.bmp
  • Dance/ChatRoomUI.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    135cc4765d434b7922f2bb51b73648fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/DnsSession.dll
    .dll windows:4 windows x86 arch:x86

    12f99549c4d28bc4c6c2b472042bb19b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Downloader.exe
    .exe windows:4 windows x86 arch:x86

    792fbdd0b07d2bd1e86745ea6fb7ebd1


    Code Sign

    Headers

    Imports

    Sections

  • Dance/EncWmv.dll
    .dll windows:4 windows x86 arch:x86

    5b3f9a2956f683d60eb5c773dd4ed6f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/EquipCenter.dll
    .dll windows:4 windows x86 arch:x86

    ce859cf275fa06a5f1665efaf5c3eedb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/FnncRoom/Config.ini
  • Dance/FnncRoom/plug_folder_focus.bmp
  • Dance/FnncRoom/plug_folder_normal.bmp
  • Dance/GameMediaLib.dll
    .dll windows:4 windows x86 arch:x86

    89dd1f67cbc9f7f926dedce3b1b30bcb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/ImageOle.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    18e201c66fb36f0c34f99d047daacbc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/MFC71u.dll
    .dll windows:4 windows x86 arch:x86

    b3fbf4599c17e9bc7ccae6518bf0f868


    Headers

    Imports

    Sections

  • Dance/Mp4Maker.exe
    .exe windows:4 windows x86 arch:x86

    1f68c90cff8a30b4c0e3f92a4f23f231


    Code Sign

    Headers

    Imports

    Sections

  • Dance/OemIcon.ico
  • Dance/Player/AudioCapture.dll
    .dll windows:4 windows x86 arch:x86

    762b13b876a54f52c249939b179810a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/AudioCodec2.dll
    .dll windows:4 windows x86 arch:x86

    f6b9b7f76f67521152057b9e22b48c89


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/CapSreen.dll
    .dll windows:4 windows x86 arch:x86

    efbe3f777bf973830c112bf43229f5b5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/Config.ini
  • Dance/Player/DeskLrc/LyricPicture/A1.bmp
  • Dance/Player/DeskLrc/LyricPicture/A2.bmp
  • Dance/Player/DeskLrc/LyricPicture/B1.bmp
  • Dance/Player/DeskLrc/LyricPicture/B2.bmp
  • Dance/Player/DeskLrc/LyricPicture/C1.bmp
  • Dance/Player/DeskLrc/LyricPicture/C2.bmp
  • Dance/Player/DeskLrc/LyricPicture/D1.bmp
  • Dance/Player/DeskLrc/LyricPicture/D2.bmp
  • Dance/Player/DeskLrc/LyricPicture/E1.bmp
  • Dance/Player/DeskLrc/LyricPicture/E2.bmp
  • Dance/Player/DeskLrc/LyricPicture/F1.bmp
  • Dance/Player/DeskLrc/LyricPicture/F2.bmp
  • Dance/Player/DeskLrc/LyricPicture/G1.bmp
  • Dance/Player/DeskLrc/LyricPicture/G2.bmp
  • Dance/Player/DeskLrc/LyricShowSetting.ini
  • Dance/Player/EncWmv.dll
    .dll windows:4 windows x86 arch:x86

    5b3f9a2956f683d60eb5c773dd4ed6f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/Filter/Antique.bmp
  • Dance/Player/Filter/Carmine.bmp
  • Dance/Player/Filter/Cinerous.bmp
  • Dance/Player/Filter/DbSidMirror.bmp
  • Dance/Player/Filter/DisBlue.bmp
  • Dance/Player/Filter/DisGreen.bmp
  • Dance/Player/Filter/GrayScale.bmp
  • Dance/Player/Filter/Inverse.bmp
  • Dance/Player/Filter/Lilac.bmp
  • Dance/Player/GGPlayer.exe
    .exe windows:4 windows x86 arch:x86

    3206fb77aa2988924024b169c418b9c7


    Code Sign

    Headers

    Imports

    Sections

  • Dance/Player/LyricEditor.dll
    .dll windows:4 windows x86 arch:x86

    c56c68f30b59f656fe074877412c70bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/LyricShow.dll
    .dll windows:4 windows x86 arch:x86

    23316f12dca3053fff2d0bdce224fe38


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/MFC71u.dll
    .dll windows:4 windows x86 arch:x86

    b3fbf4599c17e9bc7ccae6518bf0f868


    Headers

    Imports

    Sections

  • Dance/Player/MediaCenter.dll
    .dll windows:4 windows x86 arch:x86

    38605676ac52a020b3fca87cecba5d95


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/MediaInfo.dll
    .dll windows:4 windows x86 arch:x86

    1fbb32f9ea28000cfb91d2e00189a22e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/MediaPlayer.dll
    .dll windows:4 windows x86 arch:x86

    768fcac80e538bbeb294465edac66bd4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/PlayerOcx.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    4a6c012a014e4531e9105e80df545079


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/ProcessCS.dll
    .dll windows:4 windows x86 arch:x86

    0c023da8453463660b5e4425bb44189b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/Slide.dll
    .dll windows:4 windows x86 arch:x86

    a4f24ee3dfb74bb0c708583e595625af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/UICtrls.dll
    .dll windows:4 windows x86 arch:x86

    921dc7e6324f21371d222d8e1277d3cc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/VRCamera$_5_.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    10798220f1cbe5d01a8c02e6c0b704b7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/VRCamera.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    10798220f1cbe5d01a8c02e6c0b704b7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/VideoCapture.dll
    .dll windows:4 windows x86 arch:x86

    e5b55b71f8f4a42958bcaad98abfdaf3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/VideoEffect.dll
    .dll windows:4 windows x86 arch:x86

    fc4e7b5ec3969c5ccd25156519973d3e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/VolumeCtrl.dll
    .dll windows:5 windows x86 arch:x86

    9f214f5ff27e25a36acb6f280f58f6be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Player/data/IllWord.dat
  • Dance/Player/data/common.dat
  • Dance/Player/gdiplus.dll
    .dll windows:5 windows x86 arch:x86

    7941976a82dd7ff8b1a2ea069878fab3


    Headers

    Imports

    Exports

    Sections

  • Dance/Player/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • Dance/Player/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • Dance/Player/skin/DefaultSkinPlayer.ggs
  • Dance/Player/skin/PlayerBack.bmp
  • Dance/Player/skin/PlayerBack176.bmp
  • Dance/Player/skin/PlayerBack240.bmp
  • Dance/Player/skin/PlayerBack352.bmp
  • Dance/Player/skin/PlayerBack640.bmp
  • Dance/ResCenter.dll
    .dll windows:4 windows x86 arch:x86

    aeb7c69f39c12f94003f3a31a9bc7817


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/RtpStack.DLL
    .dll windows:4 windows x86 arch:x86

    784794bd29e6f793431c8af904f233f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Skin/2010beta1DownLoader.ggs
  • Dance/Skin/2010beta1EquipCenterSkin.ggs
  • Dance/Skin/2010beta1Skin.ggs
  • Dance/Skin/2010beta1Skin_0.ggs
  • Dance/Skin/2010beta1UpdateSkin.ggs
  • Dance/Skin/Alarm.png
    .png
  • Dance/Skin/DefFace.bmp
  • Dance/Skin/DefFace_16.bmp
  • Dance/Skin/Thumbs.db
  • Dance/Skin/VideoBack.bmp
  • Dance/Skin/WndBack.bmp
  • Dance/Skin/default_female.png
    .png
  • Dance/Skin/default_male.png
    .png
  • Dance/Skin/jilv.jpg
    .jpg
  • Dance/Thumbs.db
  • Dance/UIToolTip.dll
    .dll windows:4 windows x86 arch:x86

    0b5fe4eb2b7be03512291391bd4a08c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/Update.exe
    .exe windows:4 windows x86 arch:x86

    32cb8f01aa228b2c29ac6ef82ff6b1de


    Code Sign

    Headers

    Imports

    Sections

  • Dance/VideoCapture.dll
    .dll windows:4 windows x86 arch:x86

    a8638fcc38ef377834e80577f30abd68


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/VideoCodec1.dll
    .dll windows:4 windows x86 arch:x86

    25a7dddc6585fb86545c4455570f7566


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/VideoDecode2.dll
    .dll windows:4 windows x86 arch:x86

    a4bacaf55e89f395e2a6d80f0fb45bfb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/VideoEncode2.dll
    .dll windows:4 windows x86 arch:x86

    3b43ecc47d73f03f9ca67aaf55bcbcc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dance/WebGame/Category.bmp
  • Dance/WebGame/Config.ini
  • Dance/data/IllWord.dat
  • Dance/data/Update.dat
  • Dance/data/common.dat
  • Dance/gdiplus.dll
    .dll windows:5 windows x86 arch:x86

    7941976a82dd7ff8b1a2ea069878fab3


    Headers

    Imports

    Exports

    Sections

  • Dance/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • Dance/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • uninst9.exe.nsis