General

  • Target

    0dd32e6ffef11810ee79b4ff0f8c026a_JaffaCakes118

  • Size

    7.9MB

  • MD5

    0dd32e6ffef11810ee79b4ff0f8c026a

  • SHA1

    7a8ff822fc43d2eb0ec1b2677ed3e828f6df13ff

  • SHA256

    6d5b2f629c276f27925a96365adada41cb94fa1fb09102f3e3ea9c9377127fd3

  • SHA512

    f90e182a96cca53e6d12fa112e84414a275e45e052674a1505398ef4c1b8d5048b5ff8799f73000b15475c5b454982a6660063075ec7893b08fd7cc102396a22

  • SSDEEP

    196608:Vav4vreaJARoebujEo3ElPU2avRZb+PPFzrv4hLCFkuqggtNa:EGjJARhujpUlLPPFvnkuitk

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 0dd32e6ffef11810ee79b4ff0f8c026a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/01.jpg
    .jpg
  • $PLUGINSDIR/02.jpg
    .jpg
  • $PLUGINSDIR/03.jpg
    .jpg
  • $PLUGINSDIR/04.jpg
    .jpg
  • $PLUGINSDIR/IMG.dat
  • $PLUGINSDIR/IMG.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/LauncherSplash.dll
    .dll windows:4 windows x86 arch:x86

    fa303e84e019660a7244adc8ac12aeef


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Progress.bmp
  • $PLUGINSDIR/ProgressBar.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UIEx.dll
    .dll windows:4 windows x86 arch:x86

    b134f67006924ec3c4955fb7af5ba9db


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/btn.bmp
  • $PLUGINSDIR/check.bmp
  • $PLUGINSDIR/close.bmp
  • $PLUGINSDIR/closebox.bmp
  • $PLUGINSDIR/ins.bmp
  • $PLUGINSDIR/license.rtf
    .rtf
  • $PLUGINSDIR/music.mp3
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/opt.bmp
  • $PLUGINSDIR/soft.bmp
  • $PLUGINSDIR/uncheck.bmp
  • $PLUGINSDIR/wel.bmp
  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/yxdown/haowan.ico
  • $PROGRAMFILES/yxdown/xiaoyouxi.ico
  • $PROGRAMFILES/yxdown/yeyoutuijian.ico
  • BAKDATA.R3
  • BBKSDAT1.R3
  • CONFIG.5
  • DISK_1.VER
  • DISK_2.VER
  • DISK_3.VER
  • DISK_4.VER
  • EDMUSIC.R3
  • END.EXE
  • END1GRP.R3
  • END2GRP.R3
  • ESAVE0.R3S
  • ESAVE1.R3S
  • ESAVE2.R3S
  • FACEDAT.R3
  • FONT.R3
  • FUCKGRP2.R3
  • GRPDRV.EXE
  • HEXBCHP.R3
  • HEXBCHR.R3
  • HEXBMAP.R3
  • HEXGRP.R3
  • HEXICHR.R3
  • HEXZCHP.R3
  • HEXZCHR.R3
  • HEXZMAP.R3
  • INSTALL.16P
  • INSTALL.EXE
  • INSTALL.SYS
  • IPPAN0.R3
  • IPPAN0M.R3
  • MAIN.EXE
  • MARK.R3
  • MMAP.R3
  • MMAPBGPL.R3
  • MSAVE.R3
  • MSAVE0.R3S
  • MSAVE1.R3S
  • MSAVE2.R3S
  • MUSIC.R3
  • OPEN.EXE
  • OPGRP.R3
  • OPMUSIC.R3
  • PACKGRP.R3
  • PMAP.R3
  • PRO.SAV
  • REKO3IBM.COM
  • SBOPL2.COM
  • SDL.dll
    .dll windows:4 windows x86 arch:x86

    e046ce41267987ef4ccfabb239186c31


    Headers

    Imports

    Exports

    Sections

  • SDL_net.dll
    .dll windows:4 windows x86 arch:x86

    6983ad70e52cdb50438499158520025b


    Headers

    Imports

    Exports

    Sections

  • SMAP.R3
  • SMAPBGPL.R3
  • SNR0D.R3
  • SNR0M.R3
  • SNR1D.R3
  • SNR1M.R3
  • SNR2D.R3
  • SNR2M.R3
  • SNR3D.R3
  • SNR3M.R3
  • SNR4D.R3
  • SNR4M.R3
  • SSCCHR1.R3
  • SSCCHR2.R3
  • SanGuoYingJieZhuan_cht.ico
  • TFDED.COM
  • UninsYxdown.exe.nsis
  • ZIKU.16P
  • dosbox-20060729.rar
    .rar
  • dosbox-20060729/SDL.dll
    .dll windows:4 windows x86 arch:x86

    e046ce41267987ef4ccfabb239186c31


    Headers

    Imports

    Exports

    Sections

  • dosbox-20060729/SDL_net.dll
    .dll windows:4 windows x86 arch:x86

    6983ad70e52cdb50438499158520025b


    Headers

    Imports

    Exports

    Sections

  • dosbox-20060729/dosbox.exe
    .exe windows:4 windows x86 arch:x86

    59cc730073681dd18155028e46365997


    Headers

    Imports

    Sections

  • dosbox.exe
    .exe windows:4 windows x86 arch:x86

    59cc730073681dd18155028e46365997


    Headers

    Imports

    Sections

  • mcyyouxi.ini
  • ʼϷ.exe
    .exe windows:5 windows x86 arch:x86

    8f5fa0cccd9fc6082b5e89ea387bb190


    Headers

    Imports

    Sections

  • Ϸ.bat