Overview

overview

3

Static

static

3

LSPprovider.dll

windows7-x64

3

LSPprovider.dll

windows10-2004-x64

1

Plugins/pl...mo.dll

windows7-x64

1

Plugins/pl...mo.dll

windows10-2004-x64

3

Plugins/pl...o2.dll

windows7-x64

3

Plugins/pl...o2.dll

windows10-2004-x64

3

Plugins/pl...o3.dll

windows7-x64

3

Plugins/pl...o3.dll

windows10-2004-x64

3

Plugins/pl...o4.dll

windows7-x64

3

Plugins/pl...o4.dll

windows10-2004-x64

3

inject.dll

windows7-x64

1

inject.dll

windows10-2004-x64

1

l2ph.exe

windows7-x64

1

l2ph.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa0a9f0fdee095153b70750d3e47cc17_JaffaCakes118

  • Size

    1.9MB

  • MD5

    fa0a9f0fdee095153b70750d3e47cc17

  • SHA1

    9d3888a5709e35b2a2a38c88eb5edc5da9d4cbf2

  • SHA256

    18ea5bec55dab8b6fd5cf50c007f00289bcd072db43025caa524e677f733d26f

  • SHA512

    821f68d79d35825532f61f225112a514a615385e0c7a784bd47e561ca0d456f1f65eb2aff2c0b3be2515d6d1d799a88f217c10d247d374f48a4258cadfb58213

  • SSDEEP

    49152:lOr6fB1l5YiTkhCFZQr0yD1KyxRSAz3fvSB5M9YNl:l/fXLAhCiKCSAjIr

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • fa0a9f0fdee095153b70750d3e47cc17_JaffaCakes118
    .rar
  • LSPprovider.dll
    .dll windows:4 windows x86 arch:x86

    beb131b4bf9181b35e4e464c1d97dfb8


    Headers

    Imports

    Exports

    Sections

  • Plugins/plugin_demo.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/plugin_demo2.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/plugin_demo3.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/plugin_demo4.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • inject.dll
    .dll windows:4 windows x86 arch:x86

    6199f900f54127e4c1ae70fb8f0dee6f


    Headers

    Imports

    Sections

  • l2ph.exe
    .exe windows:4 windows x86 arch:x86

    8e99540da5188360c24d4173419ea950


    Headers

    Imports

    Sections

  • l2ph.jdbg
  • settings/ItemsID.ini
  • settings/PacketsT1.ini
  • settings/SkillsID.ini
  • settings/classid.ini
  • settings/npcsid.ini
  • settings/packetsc4.ini
  • settings/packetsc5.ini
  • settings/packetst0.ini
  • settings/sysmsgid.ini