General

  • Target

    0f30bba637495878f0136215aa2709bf_JaffaCakes118

  • Size

    15.8MB

  • MD5

    0f30bba637495878f0136215aa2709bf

  • SHA1

    d53a28043270e81652cc47119b4673f69f77e938

  • SHA256

    4599fd1213f17f61819e62c5b25707fb91fae08fdfbc592b46f7a10e106c428b

  • SHA512

    f295eaa66aa7d84b26087f79995b3d3b27fda52aba16e7633ef895ee86bd8421f96b6866fd9d2adfd828aa02047de3476ae726c0682b1e88c29215252aa7ef06

  • SSDEEP

    393216:/Fj/MgbCuSk6o2NDEs9qMMJwl+41Jj3HK1a0dnWfYkBwp2WG:tj/MgbCuSpJpEMGwltJjXK19pWf4o

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f30bba637495878f0136215aa2709bf_JaffaCakes118
    .zip
  • BHGui.exe
    .exe windows:5 windows x86 arch:x86

    f11e968fbc14cf2f86411bb163e4b4e3


    Code Sign

    Headers

    Imports

    Sections

  • Background/001.jpg
    .jpg
  • Background/002.JPG
    .jpg
  • Background/003.jpg
    .jpg
  • BoardImage/001.jpg
    .jpg
  • BoardImage/002.jpg
    .jpg
  • BoardImage/003.jpg
    .jpg
  • BoardImage/xy1.png
    .png
  • BoardImage/xy2.png
    .png
  • Engines/apo/Apocalypse.key
  • Engines/apo/apo.exe
    .exe windows:5 windows x86 arch:x86

    446a30bd4409345f64fabd4a18be1df3


    Code Sign

    Headers

    Imports

    Sections

  • Piece/MiniBoard/BC.BMP
  • Piece/MiniBoard/BE.BMP
  • Piece/MiniBoard/BG.BMP
  • Piece/MiniBoard/BH.BMP
  • Piece/MiniBoard/BK.BMP
  • Piece/MiniBoard/BP.BMP
  • Piece/MiniBoard/BR.BMP
  • Piece/MiniBoard/MM.bmp
  • Piece/MiniBoard/MiniBoard.bmp
  • Piece/MiniBoard/RC.BMP
  • Piece/MiniBoard/RE.BMP
  • Piece/MiniBoard/RG.BMP
  • Piece/MiniBoard/RH.BMP
  • Piece/MiniBoard/RK.BMP
  • Piece/MiniBoard/RP.BMP
  • Piece/MiniBoard/RR.BMP
  • Piece/large/ba.png
    .png
  • Piece/large/bb.png
    .png
  • Piece/large/bc.png
    .png
  • Piece/large/bk.png
    .png
  • Piece/large/bn.png
    .png
  • Piece/large/bp.png
    .png
  • Piece/large/br.png
    .png
  • Piece/large/mm.png
    .png
  • Piece/large/ra.png
    .png
  • Piece/large/rb.png
    .png
  • Piece/large/rc.png
    .png
  • Piece/large/rk.png
    .png
  • Piece/large/rn.png
    .png
  • Piece/large/rp.png
    .png
  • Piece/large/rr.png
    .png
  • Piece/middle/bc.png
    .png
  • Piece/middle/be.png
    .png
  • Piece/middle/bg.png
    .png
  • Piece/middle/bh.png
    .png
  • Piece/middle/bk.png
    .png
  • Piece/middle/bp.png
    .png
  • Piece/middle/br.png
    .png
  • Piece/middle/mm.png
    .png
  • Piece/middle/rc.png
    .png
  • Piece/middle/re.png
    .png
  • Piece/middle/rg.png
    .png
  • Piece/middle/rh.png
    .png
  • Piece/middle/rk.png
    .png
  • Piece/middle/rp.png
    .png
  • Piece/middle/rr.png
    .png
  • Piece/small/ba.png
    .png
  • Piece/small/bb.png
    .png
  • Piece/small/bc.png
    .png
  • Piece/small/bk.png
    .png
  • Piece/small/bn.png
    .png
  • Piece/small/bp.png
    .png
  • Piece/small/br.png
    .png
  • Piece/small/mask.png
    .png
  • Piece/small/ra.png
    .png
  • Piece/small/rb.png
    .png
  • Piece/small/rc.png
    .png
  • Piece/small/rk.png
    .png
  • Piece/small/rn.png
    .png
  • Piece/small/rp.png
    .png
  • Piece/small/rr.png
    .png
  • Sound/DING.WAV
  • Sound/MenuCommand.wav
  • Sound/MenuPopup.wav
  • Sound/capture.WAV
  • Sound/check.WAV
  • Sound/deng.wav
  • Sound/jeer.wav
  • Sound/move.wav
  • Sound/newgame.wav
  • Sound/pick.wav
  • Sound/redo.wav
  • Sound/skip.wav
  • Sound/undo.wav
  • bhhelp.chm
    .chm
  • fkwin.dll
    .dll windows:5 windows x86 arch:x86

    6f96928a34558e75493840f40566d277


    Headers

    Imports

    Exports

    Sections

  • ӿֿ⸨(20111121).exe
    .exe windows:4 windows x86 arch:x86

    33d53ef317b431120638bd1d355ddf32


    Headers

    Imports

    Exports

    Sections

  • ĵ/bhobk/SQLite3.lib
  • ĵ/bhobk/bhobk.c
  • ĵ/bhobk/bhobk.sln
  • ĵ/bhobk/bhobk.vcproj
    .xml
  • ĵ/bhobk/sqlite3.h
  • ĵ/Э/uci.htm
    .html
  • ĵ/Э/ͨЭ飨uci.htm
    .html
  • ĵ/Э/йͨЭ V3.0.htm
    .html
  • ĵ/HASHKEY.txt
  • ĵ//徺(1999).mht
    .eml
    • http://www.elephantbase.net/protocol/cchess_intro.htm

    • http://www.elephantbase.net/protocol/rule.htm#chap0

    • http://www.elephantbase.net/protocol/rule.htm#chap1

    • http://www.elephantbase.net/protocol/rule.htm#chap2

    • http://www.elephantbase.net/protocol/rule.htm#chap3

    • http://www.elephantbase.net/protocol/rule.htm#chap4

    • http://www.elephantbase.net/protocol/rule.htm#chap5

    • http://www.elephantbase.net/protocol/rule.htm#chap6

    • http://www.elephantbase.net/protocol/rule.htm#chap7

    • Show all
  • attachment-10
    .gif
  • attachment-11
    .gif
  • attachment-12
    .gif
  • attachment-13
    .gif
  • attachment-14
    .gif
  • attachment-15
    .gif
  • attachment-16
    .gif
  • attachment-17
    .gif
  • attachment-18
    .gif
  • attachment-19
    .gif
  • attachment-2
    .gif
  • attachment-20
  • attachment-21
    .gif
  • attachment-22
  • attachment-3
    .gif
  • attachment-4
    .gif
  • attachment-5
    .gif
  • attachment-6
    .gif
  • attachment-7
    .gif
  • attachment-8
    .gif
  • attachment-9
    .gif
  • email-html-1.txt
    .html
  • ĵ//().mht
    .eml
    • http://www.elephantbase.net/

    • http://www.elephantbase.net/protocol.htm

    • http://www.elephantbase.net/protocol/cchess_intro.htm

    • http://www.elephantbase.net/protocol/rule.htm

    • http://www.elephantbase.net/protocol/rule_asian.htm#chap_1

    • http://www.elephantbase.net/protocol/rule_asian.htm#chap_1_1

    • http://www.elephantbase.net/protocol/rule_asian.htm#chap_1_2

    • http://www.elephantbase.net/protocol/rule_asian.htm#chap_1_3

    • http://www.elephantbase.net/protocol/rule_asian.htm#chap_2

    • Show all
  • attachment-10
    .gif
  • attachment-100
    .gif
  • attachment-101
    .gif
  • attachment-102
    .gif
  • attachment-103
    .gif
  • attachment-104
    .gif
  • attachment-105
    .gif
  • attachment-106
    .gif
  • attachment-107
    .gif
  • attachment-108
    .gif
  • attachment-109
    .gif
  • attachment-11
    .gif
  • attachment-110
    .gif
  • attachment-111
  • attachment-12
    .gif
  • attachment-13
    .gif
  • attachment-14
    .gif
  • attachment-15
    .gif
  • attachment-16
    .gif
  • attachment-17
    .gif
  • attachment-18
    .gif
  • attachment-19
    .gif
  • attachment-2
    .gif
  • attachment-20
    .gif
  • attachment-21
    .gif
  • attachment-22
    .gif
  • attachment-23
    .gif
  • attachment-24
    .gif
  • attachment-25
    .gif
  • attachment-26
    .gif
  • attachment-27
    .gif
  • attachment-28
    .gif
  • attachment-29
    .gif
  • attachment-3
    .gif
  • attachment-30
    .gif
  • attachment-31
    .gif
  • attachment-32
    .gif
  • attachment-33
    .gif
  • attachment-34
    .gif
  • attachment-35
    .gif
  • attachment-36
    .gif
  • attachment-37
    .gif
  • attachment-38
    .gif
  • attachment-39
    .gif
  • attachment-4
    .gif
  • attachment-40
    .gif
  • attachment-41
    .gif
  • attachment-42
    .gif
  • attachment-43
    .gif
  • attachment-44
    .gif
  • attachment-45
    .gif
  • attachment-46
    .gif
  • attachment-47
    .gif
  • attachment-48
    .gif
  • attachment-49
    .gif
  • attachment-5
    .gif
  • attachment-50
    .gif
  • attachment-51
    .gif
  • attachment-52
    .gif
  • attachment-53
    .gif
  • attachment-54
    .gif
  • attachment-55
    .gif
  • attachment-56
    .gif
  • attachment-57
    .gif
  • attachment-58
    .gif
  • attachment-59
    .gif
  • attachment-6
    .gif
  • attachment-60
    .gif
  • attachment-61
    .gif
  • attachment-62
    .gif
  • attachment-63
    .gif
  • attachment-64
    .gif
  • attachment-65
    .gif
  • attachment-66
    .gif
  • attachment-67
    .gif
  • attachment-68
    .gif
  • attachment-69
    .gif
  • attachment-7
    .gif
  • attachment-70
    .gif
  • attachment-71
    .gif
  • attachment-72
    .gif
  • attachment-73
    .gif
  • attachment-74
    .gif
  • attachment-75
    .gif
  • attachment-76
    .gif
  • attachment-77
    .gif
  • attachment-78
    .gif
  • attachment-79
    .gif
  • attachment-8
    .gif
  • attachment-80
    .gif
  • attachment-81
    .gif
  • attachment-82
    .gif
  • attachment-83
    .gif
  • attachment-84
    .gif
  • attachment-85
    .gif
  • attachment-86
    .gif
  • attachment-87
    .gif
  • attachment-88
    .gif
  • attachment-89
    .gif
  • attachment-9
    .gif
  • attachment-90
    .gif
  • attachment-91
    .gif
  • attachment-92
    .gif
  • attachment-93
    .gif
  • attachment-94
    .gif
  • attachment-95
    .gif
  • attachment-96
    .gif
  • attachment-97
    .gif
  • attachment-98
    .gif
  • attachment-99
    .gif
  • email-html-1.txt
    .html
  • ĵ//ʵ.zip
    .zip
  • 01-1.XQF
  • 01-2.XQF
  • 01-3.XQF
  • 01-4.XQF
  • 02-1.XQF
  • 03-1.XQF
  • 04-1.XQF
  • 04-2.XQF
  • 04-3.XQF
  • 04-4.XQF
  • 05-1.XQF
  • 06-1.XQF
  • 06-2.XQF
  • 07-1.XQF
  • 08-1.XQF
  • 08-2.XQF
  • 08-3.XQF
  • 09-1.XQF
  • 09-2.XQF
  • 09-3.XQF
  • 09-4.XQF
  • 09-5.XQF
  • 09-6.XQF
  • 09-7.XQF
  • 09-8.XQF
  • 10-1.XQF
  • 10-2.XQF
  • 10-3.XQF
  • 11-1.XQF
  • 12-1.XQF
  • 12-2.XQF
  • 12-3.XQF
  • 13-1.XQF
  • 13-2.XQF
  • 13-3.XQF
  • 13-4.XQF
  • 13-5.XQF
  • 13-6.XQF
  • 13-7.XQF
  • 14-1.XQF
  • 14-2.XQF
  • 14-3.XQF
  • 15-1.XQF
  • 15-2.XQF
  • 15-3.XQF
  • 16-1.XQF
  • 16-2.XQF
  • 16-3.XQF
  • 17-1.XQF
  • 18-1.XQF
  • 18-2.XQF
  • 19-1.XQF
  • 19-2.XQF
  • 19-3.XQF
  • 19-4.XQF
  • 19-5.XQF
  • 20-1.XQF
  • 20-2.XQF
  • 20-3.XQF
  • 20-4.XQF
  • 20-5.XQF
  • 21-1.XQF
  • 21-2.XQF
  • 22-1.XQF
  • 22-2.XQF
  • 22-3.XQF
  • 22-4.XQF
  • 23-1.XQF
  • 23-2.XQF
  • 24-1.XQF
  • 24-2.XQF
  • 25-1.XQF
  • 25-2.XQF
  • 25-3.XQF
  • 26-1.XQF
  • 26-2.XQF
  • 27-1.XQF
  • 27-2.XQF
  • 27-3.XQF
  • 27-4.XQF
  • 27-5.XQF
  • 28-1.XQF
  • 28-2.XQF
  • 29-1.XQF
  • 29-2.XQF
  • 29-3.XQF
  • 30-1.XQF
  • 30-2.XQF
  • 30-3.XQF
  • 30-4.XQF
  • 31-1.XQF
  • 31-2.XQF
  • 31-3.XQF
  • 31-4.XQF
  • 32-1.XQF
  • 32-2.XQF
  • 32-3.XQF
  • 33-1.XQF
  • 33-2.XQF
  • 34-1.XQF
  • 34-2.XQF
  • 35-1.XQF
  • 35-2.XQF
  • 35-3.XQF
  • 35-4.XQF
  • .txt
  • ĵ//֮ϸ.htm
    .html
  • Ƶ̳.txt