General

  • Target

    045ac7b8147a731a904ff8512959f3b1_JaffaCakes118

  • Size

    20.2MB

  • MD5

    045ac7b8147a731a904ff8512959f3b1

  • SHA1

    5534a8c8f4a166713f0fa28d20ac38c1f9732267

  • SHA256

    cfa248754df0dc003e691088a74133b855afd54f099c993e19e0aaf6002ec156

  • SHA512

    5b4a32255ffb414788376667d44c8d5e848b4e148d2297df03a77fdeffafb03991ad16d41989373da79873957e6d046825bd85cbb948078c4d9e329d7ed9eaac

  • SSDEEP

    393216:ZNhm1QAvw+gSg1ppKdjXPcxPsAD7G+HPVnyZJJgjKeY22SqEgz6N8yYNXO6wEd4:ZP0vw6g1/4jXPcsM7iqjKekBe3gX6

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 3 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 7 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 43 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 045ac7b8147a731a904ff8512959f3b1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/K8NsisExtend.dll
    .dll windows:4 windows x86 arch:x86

    44ca10890349397a8e05ec3d2acd1753


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/locate.dll
    .dll windows:4 windows x86 arch:x86

    7f8181c74f882a780c7cd485241e8b51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRandom.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_53_/GMSkin_Image_2012_v1.zip
    .zip
  • skin.xml
  • skin/icon1.png
    .png
  • skin/关闭.png
    .png
  • skin/卸载背景.png
    .png
  • skin/多选.png
    .png
  • skin/安装.png
    .png
  • skin/安装01.png
    .png
  • skin/安装02.png
    .png
  • skin/安装03.png
    .png
  • skin/安装04.png
    .png
  • skin/安装05.png
    .png
  • skin/安装06.png
    .png
  • skin/安装07.png
    .png
  • skin/安装08.png
    .png
  • skin/安装09.png
    .png
  • skin/安装10.png
    .png
  • skin/安装11.png
    .png
  • skin/安装12.png
    .png
  • skin/安装13.png
    .png
  • skin/安装14.png
    .png
  • skin/安装15.png
    .png
  • skin/安装16.png
    .png
  • skin/安装17.png
    .png
  • skin/安装18.png
    .png
  • skin/完成.png
    .png
  • skin/广告关闭.png
    .png
  • skin/按钮.png
    .png
  • skin/最小化.png
    .png
  • skin/格子.png
    .png
  • skin/欢迎.png
    .png
  • skin/浏览.png
    .png
  • skin/游戏弹出.png
    .png
  • skin/软件弹出.png
    .png
  • skin/进度条.png
    .png
  • skin/进度条背景.png
    .png
  • skin/选项.png
    .png
  • skin/默认背景.png
    .png
  • $TEMP/$_53_/K8Skin.dll
    .dll windows:4 windows x86 arch:x86

    6326ee90412cafe0384aaac901729346


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_53_/advert.xml
  • $TEMP/$_53_/game.jpg
    .jpg
  • BMGLibPNG.dll
    .dll windows:4 windows x86 arch:x86

    27411156fd61b1c077a6fe916cd5a0ac


    Headers

    Imports

    Exports

    Sections

  • Docs/3rd Party Plugins/Adaptoid.txt
  • Docs/3rd Party Plugins/Azimer audio/Readme.txt
  • Docs/3rd Party Plugins/Azimer audio/_desktop.ini
  • Docs/3rd Party Plugins/N-Rage/Homepage.url
  • Docs/3rd Party Plugins/N-Rage/Readme.txt
  • Docs/3rd Party Plugins/N-Rage/_desktop.ini
  • Docs/3rd Party Plugins/Rice Video Plugin/HiRezTexture.txt
  • Docs/3rd Party Plugins/Rice Video Plugin/RiceVideo6.1.0-Readme.txt
  • Docs/3rd Party Plugins/Rice Video Plugin/_desktop.ini
  • Docs/3rd Party Plugins/_desktop.ini
  • Docs/Cheat Codes/Changes.txt
  • Docs/Cheat Codes/Readme.txt
  • Docs/Cheat Codes/_desktop.ini
  • Docs/Game FAQ/Whatsnew.txt
  • Docs/Game FAQ/_desktop.ini
  • Docs/Project64 Message Board.url
    .url
  • Docs/RDB/Whatsnew.txt
  • Docs/RDB/_desktop.ini
  • Docs/RDX/Unofficial_ReadMe.txt
  • Docs/RDX/_desktop.ini
  • Docs/Readme.txt
  • Docs/Whatsnew.txt
  • ExeConfig.ini
  • Lang/Chinese.pj.Lang
  • PJGAMEFAQ.CHM
    .chm
  • Plugin/Adaptoid_v1_0.dll
    .dll windows:4 windows x86 arch:x86

    62ea73ac854ade921df70bc404d1a29a


    Headers

    Imports

    Exports

    Sections

  • Plugin/AziAudio.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Plugin/Direct64.dll
    .dll windows:4 windows x86 arch:x86

    1fecab610c24cf67fdea278c0fd15ce4


    Headers

    Imports

    Exports

    Sections

  • Plugin/Jabo_DInput.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugin/Jabo_Direct3D.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugin/Jabo_Direct3D6.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugin/Jabo_Direct3D7.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugin/Jabo_Direct3D8.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugin/Jabo_Dsound.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugin/NRage_DInput8_V2.dll
    .dll windows:4 windows x86 arch:x86

    5f127a82a02ae96e5705c6629d236a24


    Headers

    Imports

    Exports

    Sections

  • Plugin/No Sound.dll
    .dll windows:4 windows x86 arch:x86

    5ec0c0f82ce996b325edc56517d33144


    Headers

    Imports

    Exports

    Sections

  • Plugin/RSP.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugin/RiceDaedalus5.2.0.ini
  • Plugin/RiceDaedalus5.4.1.dll
    .dll windows:4 windows x86 arch:x86

    1332b08d9909a6089d38218b50c6d202


    Headers

    Imports

    Exports

    Sections

  • Plugin/RiceVideo.dll
    .dll windows:4 windows x86 arch:x86

    f271b5878d39402f797b00319752bdcd


    Headers

    Imports

    Exports

    Sections

  • Plugin/RiceVideo6.1.0.ini
  • Plugin/Zilmar_Audio.dll
    .dll windows:4 windows x86 arch:x86

    94268aeab370dfb2ce1ca94a83b5c5ca


    Headers

    Imports

    Exports

    Sections

  • Plugin/glN64_v0.4.1.dll
    .dll windows:4 windows x86 arch:x86

    ae7e5a71203d940a938e6095169ac952


    Headers

    Imports

    Exports

    Sections

  • Plugin/tr64_ogl.dll
    .dll windows:4 windows x86 arch:x86

    d6c600943b54e26d7d0108e89033eddb


    Headers

    Imports

    Exports

    Sections

  • Plugin/tr64_ogl.ini
  • Project64.cache
  • Project64.chm
    .chm
  • Project64.cht
  • Project64.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Project64.rdb
  • Project64.rdx
  • Save/SMASH BROTHERS.sra
  • Save/TWINE.mpk
  • Save/dir.txt
  • Screenshots/Super Smash Bros. (U) snap0000.jpg
    .jpg
  • Screenshots/Super Smash Bros. (U) snap0001.jpg
    .jpg
  • d3dx9_24.dll
    .dll windows:5 windows x86 arch:x86

    b765118b3c0b3118a5fb2c94de57bb9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • game.ico
  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • pif2.dat
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/K8NsisExtend.dll
    .dll windows:4 windows x86 arch:x86

    44ca10890349397a8e05ec3d2acd1753


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRandom.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $TEMP/$_54_/GMSkin_Image_2012_v1.zip
    .zip
  • skin.xml
  • skin/icon1.png
    .png
  • skin/关闭.png
    .png
  • skin/卸载背景.png
    .png
  • skin/多选.png
    .png
  • skin/安装.png
    .png
  • skin/安装01.png
    .png
  • skin/安装02.png
    .png
  • skin/安装03.png
    .png
  • skin/安装04.png
    .png
  • skin/安装05.png
    .png
  • skin/安装06.png
    .png
  • skin/安装07.png
    .png
  • skin/安装08.png
    .png
  • skin/安装09.png
    .png
  • skin/安装10.png
    .png
  • skin/安装11.png
    .png
  • skin/安装12.png
    .png
  • skin/安装13.png
    .png
  • skin/安装14.png
    .png
  • skin/安装15.png
    .png
  • skin/安装16.png
    .png
  • skin/安装17.png
    .png
  • skin/安装18.png
    .png
  • skin/完成.png
    .png
  • skin/广告关闭.png
    .png
  • skin/按钮.png
    .png
  • skin/最小化.png
    .png
  • skin/格子.png
    .png
  • skin/欢迎.png
    .png
  • skin/浏览.png
    .png
  • skin/游戏弹出.png
    .png
  • skin/软件弹出.png
    .png
  • skin/进度条.png
    .png
  • skin/进度条背景.png
    .png
  • skin/选项.png
    .png
  • skin/默认背景.png
    .png
  • $TEMP/$_54_/K8NsisExtend.dll
    .dll windows:4 windows x86 arch:x86

    44ca10890349397a8e05ec3d2acd1753


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_54_/K8Skin.dll
    .dll windows:4 windows x86 arch:x86

    6326ee90412cafe0384aaac901729346


    Headers

    Imports

    Exports

    Sections

  • ʼϷ.exe
    .exe windows:4 windows x86 arch:x86

    1ca1b6950aed92e77272e6e31defb204


    Headers

    Imports

    Exports

    Sections

  • ǴҶ.zip
    .zip
  • Super Smash Bros. (U) [!].v64