Overview

overview

7

Static

static

7

Engine/Bin...pi.dll

windows7-x64

1

Engine/Bin...pi.dll

windows10-2004-x64

1

Engine/Bin...64.dll

windows7-x64

1

Engine/Bin...64.dll

windows10-2004-x64

1

FreeTP.Org.url

windows7-x64

6

FreeTP.Org.url

windows10-2004-x64

3

ReadMe - �...и.url

windows7-x64

1

ReadMe - �...и.url

windows10-2004-x64

1

WitchIt.exe

windows7-x64

1

WitchIt.exe

windows10-2004-x64

1

WitchIt/Bi..._o.dll

windows7-x64

1

WitchIt/Bi..._o.dll

windows10-2004-x64

3

WitchIt/Bi..._o.dll

windows7-x64

1

WitchIt/Bi..._o.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    f34df5919b356d2b80c60dc587e9aac1_JaffaCakes118

  • Size

    1.3MB

  • MD5

    f34df5919b356d2b80c60dc587e9aac1

  • SHA1

    c55415b461cf32e77a9def5644cf9a931e2dfb09

  • SHA256

    705fda3f40bbe5639c2e16fb5864473c9dccfe23118c1ce8d9988ddde4436054

  • SHA512

    593dd871ee67339026b2ce3e7f97a5b0fe5d34e1118cfa7b34ab7c9efd72f904cf74ed71193874e7050bc881db51dc09a7e45c55236fabf80cd0aef879e83536

  • SSDEEP

    24576:zlAw89KJBrK+fHi4auXL8M0NMW+sz55IwqKV2lCU76nZtv79pvbu:zlX8GrKQpLKv+s0wqQ2lCO6nZtvZpvq

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f34df5919b356d2b80c60dc587e9aac1_JaffaCakes118
    .rar
  • Engine/Binaries/ThirdParty/Steamworks/Steamv139/Win32/steam_api.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • Engine/Binaries/ThirdParty/Steamworks/Steamv139/Win64/steam_api64.dll
    .dll windows:5 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • FreeTP.Org.url
  • ReadMe - как играть по сети.url
  • WitchIt.exe
    .exe windows:6 windows x64 arch:x64

    70e5066fac5169ee779903c2061404de


    Headers

    Imports

    Sections

  • WitchIt/Binaries/Win32/CreamAPI.log
  • WitchIt/Binaries/Win32/CreamAPI/559650/stats/CreamAPI.Stats.cfg
  • WitchIt/Binaries/Win32/cream_api.ini
  • WitchIt/Binaries/Win32/steam_api_o.dll
    .dll windows:5 windows x86 arch:x86

    505799f8a745662a7ae4877b9db0f7be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WitchIt/Binaries/Win64/CreamAPI.log
  • WitchIt/Binaries/Win64/CreamAPI/559650/stats/CreamAPI.Stats.cfg
  • WitchIt/Binaries/Win64/cream_api.ini
  • WitchIt/Binaries/Win64/steam_api64_o.dll
    .dll windows:5 windows x64 arch:x64

    477f42e8df284016fc9a7250f8f9a472


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • favicon.ico