AddEventHandler
Unload
UnsetEventHandler
WhichButtonId
General
-
Target
10351e89cdda27c073059425e5ee8bff_JaffaCakes118
-
Size
8.8MB
-
MD5
10351e89cdda27c073059425e5ee8bff
-
SHA1
be826528fceeb98d0fdb209e5d5edb76ee191065
-
SHA256
e327a7b04c66d6138577cb6f71813e68999bdb51ced6cd4b46997d6bd147b44d
-
SHA512
c5d9807a571f22778f9d182bc2ccde7245e41e6f07b442759d1db4459016f01d5e6481cf4bb84f4c88baea79ad59a8dd9d25ab20ae621f46e154d3a16fa503e3
-
SSDEEP
196608:VUOF//6JxyaRZEMYqYBne1CtA96BlBg2wb3ruyLNNIS:VU4Qx9EM5KnMgBlW2Uumr
Score
7/10
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 2 IoCs
Detects file using ACProtect software.
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 22 IoCs
Checks for missing Authenticode signature.
-
NSIS installer 4 IoCs
Files
-
10351e89cdda27c073059425e5ee8bff_JaffaCakes118
099c0646ea7282d232219f8807883be0
Headers
Imports
Sections
-
$PLUGINSDIR/ButtonEvent.dll
0ece15e7d9bb35972aec701f46192460
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/K8NsisExtend.dll
44ca10890349397a8e05ec3d2acd1753
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/NSISdl.dll
9cce555dd3ff1b6c7dc92d64c794c51a
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/System.dll
2017f2acbdaa42ab3e4adeb8b4c37e7b
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/locate.dll
7f8181c74f882a780c7cd485241e8b51
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/nsDialogs.dll
1e2884056e655f2b7bc5a904e352fc80
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/nsRandom.dll
Headers
Exports
Sections
-
out.upx
Headers
Sections
-
$PLUGINSDIR/xml.dll
b5ed5b3a951d4443ce56e5453702d536
Headers
Imports
Exports
Sections
-
$TEMP/$_53_/GMSkin_Image_2012_v1.zip
-
skin.xml
-
skin/icon1.png
-
skin/关闭.png
-
skin/卸载背景.png
-
skin/多选.png
-
skin/安装.png
-
skin/安装01.png
-
skin/安装02.png
-
skin/安装03.png
-
skin/安装04.png
-
skin/安装05.png
-
skin/安装06.png
-
skin/安装07.png
-
skin/安装08.png
-
skin/安装09.png
-
skin/安装10.png
-
skin/安装11.png
-
skin/安装12.png
-
skin/安装13.png
-
skin/安装14.png
-
skin/安装15.png
-
skin/安装16.png
-
skin/安装17.png
-
skin/安装18.png
-
skin/完成.png
-
skin/广告关闭.png
-
skin/按钮.png
-
skin/最小化.png
-
skin/格子.png
-
skin/欢迎.png
-
skin/浏览.png
-
skin/游戏弹出.png
-
skin/软件弹出.png
-
skin/进度条.png
-
skin/进度条背景.png
-
skin/选项.png
-
skin/默认背景.png
-
$TEMP/$_53_/K8Skin.dll
6326ee90412cafe0384aaac901729346
Headers
Imports
Exports
Sections
-
$TEMP/$_53_/advert.xml
-
$TEMP/$_53_/game.jpg
-
ExeConfig.ini
-
Fenshu.zfc
-
Main_gamex.ini
-
com_go.wav
-
futu.bmp
-
game.ico
-
i so you.wav
-
laotou.wav
-
letsgo.wav
-
shangfen1.wav
-
shangfen2.wav
-
uninst.exe
099c0646ea7282d232219f8807883be0
Headers
Imports
Sections
-
$PLUGINSDIR/K8NsisExtend.dll
44ca10890349397a8e05ec3d2acd1753
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/NSISdl.dll
9cce555dd3ff1b6c7dc92d64c794c51a
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/System.dll
2017f2acbdaa42ab3e4adeb8b4c37e7b
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/nsDialogs.dll
1e2884056e655f2b7bc5a904e352fc80
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/nsRandom.dll
Headers
Exports
Sections
-
out.upx
Headers
Sections
-
$TEMP/$_54_/GMSkin_Image_2012_v1.zip
-
skin.xml
-
skin/icon1.png
-
skin/关闭.png
-
skin/卸载背景.png
-
skin/多选.png
-
skin/安装.png
-
skin/安装01.png
-
skin/安装02.png
-
skin/安装03.png
-
skin/安装04.png
-
skin/安装05.png
-
skin/安装06.png
-
skin/安装07.png
-
skin/安装08.png
-
skin/安装09.png
-
skin/安装10.png
-
skin/安装11.png
-
skin/安装12.png
-
skin/安装13.png
-
skin/安装14.png
-
skin/安装15.png
-
skin/安装16.png
-
skin/安装17.png
-
skin/安装18.png
-
skin/完成.png
-
skin/广告关闭.png
-
skin/按钮.png
-
skin/最小化.png
-
skin/格子.png
-
skin/欢迎.png
-
skin/浏览.png
-
skin/游戏弹出.png
-
skin/软件弹出.png
-
skin/进度条.png
-
skin/进度条背景.png
-
skin/选项.png
-
skin/默认背景.png
-
$TEMP/$_54_/K8NsisExtend.dll
44ca10890349397a8e05ec3d2acd1753
Headers
Imports
Exports
Sections
-
$TEMP/$_54_/K8Skin.dll
6326ee90412cafe0384aaac901729346
Headers
Imports
Exports
Sections
-
xiafen.wav
-
zhutu.bmp
-
ʡǮϻ.txt
-
ʼϷ.exe
1ca1b6950aed92e77272e6e31defb204
Headers
Imports
Exports
Sections
-
ϻ.exe
5c2023ea3cd428f258b50ede93430c6b
Headers
Imports
Sections
-
Ϸͼ.bmp