Static task
static1
Behavioral task
behavioral1
Sample
hLaPEx/hLaPEx.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
hLaPEx/hLaPEx.exe
Resource
win10v2004-20240412-en
General
-
Target
f68ff1f75f9467c51ad785c48e807b85_JaffaCakes118
-
Size
409KB
-
MD5
f68ff1f75f9467c51ad785c48e807b85
-
SHA1
ce713dc6eee8897ab4bcbfc8b2dbee13a1a5f237
-
SHA256
d8b3abd3f228926c6eded764ef6f102d498fe924b37ec92e80cbab47b796d83c
-
SHA512
17a5f16f7b18fba8e156e122485c90d3a22caceaef7a30d4993c1f2f39d9fa109c8e7be35e7e14e72aa1932560e2b89f7b55804a20b0ceaa10893c9c4c37b743
-
SSDEEP
12288:MSg9UXVkV5fYHXpNpKuiHpXM9uoiFPI7BZn:jEgVkV5fuEuiBM9WUZn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/hLaPEx/hLaPEx.exe
Files
-
f68ff1f75f9467c51ad785c48e807b85_JaffaCakes118.rar
-
hLaPEx/data/filter.dat
-
hLaPEx/data/packets.txt
-
hLaPEx/data/packets/100 Quick Healing Potions.txt
-
hLaPEx/data/packets/100 новогодних елок.txt
-
hLaPEx/data/packets/A grade lift.txt
-
hLaPEx/data/packets/A grade plash.txt
-
hLaPEx/data/packets/Angel Slayer Hste.txt
-
hLaPEx/data/packets/Aurakyria Lance.txt
-
hLaPEx/data/packets/Bloody Orchid(focus).txt
-
hLaPEx/data/packets/Boots.txt
-
hLaPEx/data/packets/Carnage(QR).txt
-
hLaPEx/data/packets/Carnage.txt
-
hLaPEx/data/packets/Chest.txt
-
hLaPEx/data/packets/DC Helmet.txt
-
hLaPEx/data/packets/DC Light niz.txt
-
hLaPEx/data/packets/DC Light verh.txt
-
hLaPEx/data/packets/DC Shield.txt
-
hLaPEx/data/packets/DC boots.txt
-
hLaPEx/data/packets/DC mag boots.txt
-
hLaPEx/data/packets/DC mag per4i.txt
-
hLaPEx/data/packets/DC mag puzo.txt
-
hLaPEx/data/packets/DC per4i.txt
-
hLaPEx/data/packets/Dark elven dagger(MM).txt
-
hLaPEx/data/packets/Dragon Claw Axe.txt
-
hLaPEx/data/packets/Dragon's Thouth.txt
-
hLaPEx/data/packets/Dragon's Tooth.txt
-
hLaPEx/data/packets/Dragon.txt
-
hLaPEx/data/packets/Dragonic Helmet.txt
-
hLaPEx/data/packets/Earring of Antharas.txt
-
hLaPEx/data/packets/Elemental Sword(empower).txt
-
hLaPEx/data/packets/Fullarmor.txt
-
hLaPEx/data/packets/Gloves.txt
-
hLaPEx/data/packets/Hlapex/data/packets/A armor.txt
-
hLaPEx/data/packets/Hlapex/data/packets/A weapon.txt
-
hLaPEx/data/packets/Hlapex/data/packets/Antitarget.txt
-
hLaPEx/data/packets/Hlapex/data/packets/Bishop.txt
-
hLaPEx/data/packets/Hlapex/data/packets/Bow.txt
-
hLaPEx/data/packets/Hlapex/data/packets/C weapon.txt
-
hLaPEx/data/packets/Hlapex/data/packets/S armor.txt
-
hLaPEx/data/packets/Hlapex/data/packets/S weapon.txt
-
hLaPEx/data/packets/Hlapex/data/packets/Serv dayn.txt
-
hLaPEx/data/packets/Hlapex/data/packets/Skilss.txt
-
hLaPEx/data/packets/Hlapex/data/packets/bsoe.txt
-
hLaPEx/data/packets/Hlapex/data/packets/c armor.txt
-
hLaPEx/data/packets/Hlapex/data/packets/heal.txt
-
hLaPEx/data/packets/Hlapex/data/packets/hero.txt
-
hLaPEx/data/packets/Hlapex/data/packets/lvl-up.txt
-
hLaPEx/data/packets/Hlapex/data/packets/mutant.txt
-
hLaPEx/data/packets/Hlapex/data/packets/mylt.txt
-
hLaPEx/data/packets/Hlapex/data/packets/strider.txt
-
hLaPEx/data/packets/Hlapex/data/packets/wyvern.txt
-
hLaPEx/data/packets/Majestic Necklake.txt
-
hLaPEx/data/packets/Majestic Ring.txt
-
hLaPEx/data/packets/Majestic Serga.txt
-
hLaPEx/data/packets/Necklace Of Valakas.txt
-
hLaPEx/data/packets/Nightmare Shield.txt
-
hLaPEx/data/packets/Party Mask.txt
-
hLaPEx/data/packets/Ring OF Baium.txt
-
hLaPEx/data/packets/S mech.txt
-
hLaPEx/data/packets/SOM(A).txt
-
hLaPEx/data/packets/SSS.txt
-
hLaPEx/data/packets/Scrol Enchance A armor.txt
-
hLaPEx/data/packets/Scrol Enchance A weapon.txt
-
hLaPEx/data/packets/Shining Arrow.txt
-
hLaPEx/data/packets/Tahlum Boots.txt
-
hLaPEx/data/packets/Tahlum HElmet.txt
-
hLaPEx/data/packets/The Robe.txt
-
hLaPEx/data/packets/The Staff.txt
-
hLaPEx/data/packets/The bow.txt
-
hLaPEx/data/packets/Yablonski's Hammer.txt
-
hLaPEx/data/packets/ads.txt
-
hLaPEx/data/packets/anti-target.txt
-
hLaPEx/data/packets/bow.txt
-
hLaPEx/data/packets/dark legion's edge.txt
-
hLaPEx/data/packets/dragonic puzo.txt
-
hLaPEx/data/packets/kesh-kesh.txt
-
hLaPEx/data/packets/knife 3000.txt
-
hLaPEx/data/packets/lvl-up.txt
-
hLaPEx/data/packets/mag kniga.txt
-
hLaPEx/data/packets/majestik gloves light.txt
-
hLaPEx/data/packets/mana recovery.txt
-
hLaPEx/data/packets/nightmerish tatto.txt
-
hLaPEx/data/packets/scroll enchant weapon s grade.txt
-
hLaPEx/data/packets/soul bow.txt
-
hLaPEx/data/packets/soul soperator.txt
-
hLaPEx/data/packets/strider.txt
-
hLaPEx/data/packets/wyvern.txt
-
hLaPEx/data/packets/Копия dark legion's edge.txt
-
hLaPEx/data/packets/копье p.atk 30000.txt
-
hLaPEx/data/packets/предмет вызывающий виверну.txt
-
hLaPEx/data/scripts/GM mode.pas
-
hLaPEx/data/scripts/anti_limit.pas
-
hLaPEx/data/scripts/block_gm.pas
-
hLaPEx/data/scripts/default.pas
-
hLaPEx/data/scripts/invisibl.pas
-
hLaPEx/data/scripts/last kick.pas
-
hLaPEx/data/scripts/log_chat.pas
-
hLaPEx/data/scripts/pk_search.pas
-
hLaPEx/data/scripts/rotate_title2.pas
-
hLaPEx/data/scripts/target_attacker.pas
-
hLaPEx/data/scripts/title1.pas
-
hLaPEx/data/scripts/Информация об игроке.pas
-
hLaPEx/data/system/items.ini
-
hLaPEx/hLaPEx.exe.exe windows:4 windows x86 arch:x86
220a014578e35e1f6e0866af507dc3c5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
winspool.drv
OpenPrinterA
shell32
ShellExecuteA
comdlg32
GetSaveFileNameA
wsock32
WSACleanup
Sections
CODE Size: 335KB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
hLaPEx/Информация об игроке.txt