Overview

overview

10

Static

static

10

AutoBot/AutoBot.exe

windows7-x64

1

AutoBot/AutoBot.exe

windows10-2004-x64

1

AutoBot/EgoFeeder.exe

windows7-x64

3

AutoBot/EgoFeeder.exe

windows10-2004-x64

3

AutoBot/Im...LL.dll

windows7-x64

3

AutoBot/Im...LL.dll

windows10-2004-x64

3

AutoBot/Sc...re.exe

windows7-x64

1

AutoBot/Sc...re.exe

windows10-2004-x64

1

AutoBot/So...ot.ps1

windows7-x64

1

AutoBot/So...ot.ps1

windows10-2004-x64

1

AutoBot/So...er.ps1

windows7-x64

1

AutoBot/So...er.ps1

windows10-2004-x64

1

AutoBot/So...le.ps1

windows7-x64

1

AutoBot/So...le.ps1

windows10-2004-x64

1

AutoBot/So...ng.ps1

windows7-x64

1

AutoBot/So...ng.ps1

windows10-2004-x64

1

AutoBot/So...ll.ps1

windows7-x64

1

AutoBot/So...ll.ps1

windows10-2004-x64

1

AutoBot/So...Ex.ps1

windows7-x64

1

AutoBot/So...Ex.ps1

windows10-2004-x64

1

AutoBot/So...ze.ps1

windows7-x64

1

AutoBot/So...ze.ps1

windows10-2004-x64

1

AutoBot/Source/IE.ps1

windows7-x64

1

AutoBot/Source/IE.ps1

windows10-2004-x64

1

AutoBot/So...sc.ps1

windows7-x64

1

AutoBot/So...sc.ps1

windows10-2004-x64

1

AutoBot/So...re.ps1

windows7-x64

1

AutoBot/So...re.ps1

windows10-2004-x64

1

AutoBot/So...me.ps1

windows7-x64

1

AutoBot/So...me.ps1

windows10-2004-x64

1

AutoBot/So...ID.ps1

windows7-x64

1

AutoBot/So...ID.ps1

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0daa54679e73a3a71cb6ad1fe777e14c_JaffaCakes118

  • Size

    12.4MB

  • MD5

    0daa54679e73a3a71cb6ad1fe777e14c

  • SHA1

    44e050160904a46fb7b1cbb7eb96df7f56499513

  • SHA256

    388b7a4458b59eac5c9fe9f4571659be06b4a4b72e1ef5f95acc9961ac890a1b

  • SHA512

    6504dfb347ed9707e76e8982966b1f2d671d7f6b3d6ab1d9182a6edd585647c4c932baf41fa1dff472914d5c575a42de4122865309bf4954ece6ceb011836885

  • SSDEEP

    196608:ygIvZ8tyxECv+fGviikEYOKGwLpxaZvS/x6wCxZSMzMTrr/vr0i7fGMDMD:y7vSyxT+fGvlbiaZvC6Fg3rr0GfhQD

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://upload.wikimedia.org/wikipedia/fr/thumb/6/65/Logo_BMW.svg/564px-Logo_BMW.svg.png

Extracted

Language
ps1
Source
URLs
exe.dropper

http://shaggyze.thereflextions.com/
exe.dropper

http://shaggyze.hobby-site.com:8080/Mabinogi%20Mods/
exe.dropper

http://shaggyze.thereflextions.com

Extracted

Language
ps1
Source
URLs
exe.dropper

http://rh.scottketelaar.com/shaggyze/
exe.dropper

http://shaggyze.hoggshobbies.com/
exe.dropper

http://shaggyze.hobby-site.com:8080/Mabinogi%20Mods/

Signatures

  • AutoIT Executable 10 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • 0daa54679e73a3a71cb6ad1fe777e14c_JaffaCakes118
    .rar
  • AutoBot/AutoBot.exe
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

  • AutoBot/Clicker.ini
  • AutoBot/EgoFeeder.exe
    .exe windows:4 windows x86 arch:x86

    2a3100a777f218dc13b45804af8d5e54


    Headers

    Imports

    Sections

  • AutoBot/Fight.ini
  • AutoBot/Find/Images/beak.bmp
  • AutoBot/Find/Images/buttons/F1.bmp
  • AutoBot/Find/Images/buttons/O.bmp
  • AutoBot/Find/Images/buttons/X.bmp
  • AutoBot/Find/Images/buttons/advance.bmp
  • AutoBot/Find/Images/buttons/advance1.bmp
  • AutoBot/Find/Images/buttons/close.bmp
  • AutoBot/Find/Images/buttons/close1.bmp
  • AutoBot/Find/Images/buttons/close2.bmp
  • AutoBot/Find/Images/buttons/closeall.bmp
  • AutoBot/Find/Images/buttons/closeall1.bmp
  • AutoBot/Find/Images/buttons/closeall2.bmp
  • AutoBot/Find/Images/buttons/complete.bmp
  • AutoBot/Find/Images/buttons/continue.bmp
  • AutoBot/Find/Images/buttons/dead.bmp
  • AutoBot/Find/Images/buttons/desktop.ini
  • AutoBot/Find/Images/buttons/drop.bmp
  • AutoBot/Find/Images/buttons/endconvo.bmp
  • AutoBot/Find/Images/buttons/feed.bmp
  • AutoBot/Find/Images/buttons/give.bmp
  • AutoBot/Find/Images/buttons/inv.bmp
  • AutoBot/Find/Images/buttons/inv1.bmp
  • AutoBot/Find/Images/buttons/inv2.bmp
  • AutoBot/Find/Images/buttons/inv3.bmp
  • AutoBot/Find/Images/buttons/inv4.bmp
  • AutoBot/Find/Images/buttons/inv5.bmp
  • AutoBot/Find/Images/buttons/metal.bmp
  • AutoBot/Find/Images/buttons/ok.bmp
  • AutoBot/Find/Images/buttons/ok1.bmp
  • AutoBot/Find/Images/buttons/ok2.bmp
  • AutoBot/Find/Images/buttons/revivehere.bmp
  • AutoBot/Find/Images/buttons/revivehere0.bmp
  • AutoBot/Find/Images/buttons/revivehere1.bmp
  • AutoBot/Find/Images/buttons/revivehere2.bmp
  • AutoBot/Find/Images/buttons/reviverhere1.bmp
  • AutoBot/Find/Images/buttons/shop.bmp
  • AutoBot/Find/Images/buttons/smash.bmp
  • AutoBot/Find/Images/desktop.ini
  • AutoBot/Find/Images/drop/brokesieve.bmp
  • AutoBot/Find/Images/drop/desktop.ini
  • AutoBot/Find/Images/drop/hp100pot.bmp
  • AutoBot/Find/Images/drop/hp100pot1.bmp
  • AutoBot/Find/Images/drop/hp100pot2.bmp
  • AutoBot/Find/Images/drop/hp50pot.bmp
  • AutoBot/Find/Images/drop/hp50pot1.bmp
  • AutoBot/Find/Images/drop/hpmp30pot.bmp
  • AutoBot/Find/Images/drop/hpmp30pot1.bmp
  • AutoBot/Find/Images/drop/hpstam30pot.bmp
  • AutoBot/Find/Images/drop/hpstam50pot.bmp
  • AutoBot/Find/Images/drop/mp50pot.bmp
  • AutoBot/Find/Images/drop/mp50pot1.bmp
  • AutoBot/Find/Images/drop/mp50pot2.bmp
  • AutoBot/Find/Images/drop/stam100pot.bmp
  • AutoBot/Find/Images/drop/stam50pot.bmp
  • AutoBot/Find/Images/drop/stam50pot1.bmp
  • AutoBot/Find/Images/drop/sulfur.bmp
  • AutoBot/Find/Images/egg.bmp
  • AutoBot/Find/Images/equip/brokesieve.bmp
  • AutoBot/Find/Images/equip/desktop.ini
  • AutoBot/Find/Images/equip/goodsieve.bmp
  • AutoBot/Find/Images/equip/goodsieve2.bmp
  • AutoBot/Find/Images/gui/desktop.ini
  • AutoBot/Find/Images/gui/gui.bmp
  • AutoBot/Find/Images/gui/splash.ico
  • AutoBot/Find/Images/gui/splash.png
    .png
  • AutoBot/Find/Images/item/aquamarine.bmp
  • AutoBot/Find/Images/item/balloon.bmp
  • AutoBot/Find/Images/item/baloon1.bmp
  • AutoBot/Find/Images/item/cobweb.bmp
  • AutoBot/Find/Images/item/cobweb1.bmp
  • AutoBot/Find/Images/item/cobweb2.bmp
  • AutoBot/Find/Images/item/copper.bmp
  • AutoBot/Find/Images/item/copper2.bmp
  • AutoBot/Find/Images/item/crystal.bmp
  • AutoBot/Find/Images/item/crystal1.bmp
  • AutoBot/Find/Images/item/desktop.ini
  • AutoBot/Find/Images/item/emerald.bmp
  • AutoBot/Find/Images/item/firewood.bmp
  • AutoBot/Find/Images/item/firewood0.bmp
  • AutoBot/Find/Images/item/firewood1.bmp
  • AutoBot/Find/Images/item/firewood2.bmp
  • AutoBot/Find/Images/item/fossil.bmp
  • AutoBot/Find/Images/item/fossil1.bmp
  • AutoBot/Find/Images/item/fossil2.bmp
  • AutoBot/Find/Images/item/fossil3.bmp
  • AutoBot/Find/Images/item/gem.bmp
  • AutoBot/Find/Images/item/gem1.bmp
  • AutoBot/Find/Images/item/gem2.bmp
  • AutoBot/Find/Images/item/gem3.bmp
  • AutoBot/Find/Images/item/gem4.bmp
  • AutoBot/Find/Images/item/gloves.bmp
  • AutoBot/Find/Images/item/gold.bmp
  • AutoBot/Find/Images/item/gold1.bmp
  • AutoBot/Find/Images/item/gold2.bmp
  • AutoBot/Find/Images/item/gold3.bmp
  • AutoBot/Find/Images/item/herb.bmp
  • AutoBot/Find/Images/item/hp100pot.bmp
  • AutoBot/Find/Images/item/hpmp30pot.bmp
  • AutoBot/Find/Images/item/iron.bmp
  • AutoBot/Find/Images/item/iron2.bmp
  • AutoBot/Find/Images/item/mail.bmp
  • AutoBot/Find/Images/item/mp50pot.bmp
  • AutoBot/Find/Images/item/mp50pot1.bmp
  • AutoBot/Find/Images/item/mythril.bmp
  • AutoBot/Find/Images/item/mythril2.bmp
  • AutoBot/Find/Images/item/ore.bmp
  • AutoBot/Find/Images/item/ore1.bmp
  • AutoBot/Find/Images/item/ore2.bmp
  • AutoBot/Find/Images/item/ore3.bmp
  • AutoBot/Find/Images/item/playpage.bmp
  • AutoBot/Find/Images/item/playpage1.bmp
  • AutoBot/Find/Images/item/playpage2.bmp
  • AutoBot/Find/Images/item/potion.bmp
  • AutoBot/Find/Images/item/scroll.bmp
  • AutoBot/Find/Images/item/shoes.bmp
  • AutoBot/Find/Images/item/silver.bmp
  • AutoBot/Find/Images/item/silver2.bmp
  • AutoBot/Find/Images/item/snowball.bmp
  • AutoBot/Find/Images/item/snowball1.bmp
  • AutoBot/Find/Images/item/snowball2.bmp
  • AutoBot/Find/Images/item/spinel.bmp
  • AutoBot/Find/Images/item/stone.bmp
  • AutoBot/Find/Images/item/sword.bmp
  • AutoBot/Find/Images/item/topaz.bmp
  • AutoBot/Find/Images/item/wool.bmp
  • AutoBot/Find/Images/mob/desktop.ini
  • AutoBot/Find/Images/mob/mongoose.bmp
  • AutoBot/Find/Images/mob/mongoose1.bmp
  • AutoBot/Find/Images/npc/belita.bmp
  • AutoBot/Find/Images/npc/desktop.ini
  • AutoBot/Find/Images/pelvis.bmp
  • AutoBot/Find/Images/prop/Image1.bmp
  • AutoBot/Find/Images/prop/Image2.bmp
  • AutoBot/Find/Images/prop/Image3.bmp
  • AutoBot/Find/Images/prop/blah.bmp
  • AutoBot/Find/Images/prop/chopping.bmp
  • AutoBot/Find/Images/prop/chopping1.bmp
  • AutoBot/Find/Images/prop/chopping2.bmp
  • AutoBot/Find/Images/prop/desktop.ini
  • AutoBot/Find/Images/prop/gold.bmp
  • AutoBot/Find/Images/prop/gold1.bmp
  • AutoBot/Find/Images/prop/papersheep.bmp
  • AutoBot/Find/Images/prop/papersheep1.bmp
  • AutoBot/Find/Images/prop/sheep.bmp
  • AutoBot/Find/Images/prop/silver.bmp
  • AutoBot/Find/Images/prop/silver1.bmp
  • AutoBot/Find/Images/prop/silver2.bmp
  • AutoBot/Find/Images/prop/silver3.bmp
  • AutoBot/Find/Images/prop/silver4.bmp
  • AutoBot/Find/Images/prop/snowman.bmp
  • AutoBot/Find/Images/prop/snowman1.bmp
  • AutoBot/Find/Images/prop/snowman2.bmp
  • AutoBot/Find/Images/prop/snowman3.bmp
  • AutoBot/Find/Images/prop/sulfur.bmp
  • AutoBot/Find/Images/prop/sulfur1.bmp
  • AutoBot/Find/Images/prop/sulfur2.bmp
  • AutoBot/Find/Images/prop/sulfur3.bmp
  • AutoBot/Find/Images/prop/sulfur4.bmp
  • AutoBot/Find/Images/prop/sulfur5.bmp
  • AutoBot/Find/Images/prop/tree.bmp
  • AutoBot/Find/Images/prop/tree1.bmp
  • AutoBot/Find/Images/prop/tree2.bmp
  • AutoBot/Find/Images/prop/tree3.bmp
  • AutoBot/Find/Images/prop/waypoint.bmp
  • AutoBot/Find/Images/prop/waypoint0.bmp
  • AutoBot/Find/Images/prop/waypoint1.bmp
  • AutoBot/Find/Images/prop/waypoint2.bmp
  • AutoBot/Find/Images/prop/waypoint3.bmp
  • AutoBot/Find/Images/prop/waypoint4.bmp
  • AutoBot/Find/Images/prop/waypoint5.bmp
  • AutoBot/Find/Images/pumpkin.bmp
  • AutoBot/Find/Images/scapula.bmp
  • AutoBot/Find/Images/skull.bmp
  • AutoBot/Find/Images/star.bmp
  • AutoBot/Find/Images/tibia.bmp
  • AutoBot/Find/Images/tooth.bmp
  • AutoBot/Find/Images/use/desktop.ini
  • AutoBot/Find/Images/use/fossil.bmp
  • AutoBot/Find/Images/use/fossil1.bmp
  • AutoBot/Find/Images/use/fossil2.bmp
  • AutoBot/Find/Images/use/fossil3.bmp
  • AutoBot/Find/Images/use/gpumpkin.bmp
  • AutoBot/Find/Images/use/gpumpkin1.bmp
  • AutoBot/Find/Images/use/gpumpkin2.bmp
  • AutoBot/Find/Images/use/pumpkin.bmp
  • AutoBot/Find/Images/use/pumpkin1.bmp
  • AutoBot/Find/Images/use/pumpkin2.bmp
  • AutoBot/Find/Macros/beak.rst
  • AutoBot/Find/Macros/beak2.rst
  • AutoBot/Find/Macros/desktop.ini
  • AutoBot/Find/Macros/egg.rst
  • AutoBot/Find/Macros/pelvis.rst
  • AutoBot/Find/Macros/pumpkin.rst
  • AutoBot/Find/Macros/scapula.rst
  • AutoBot/Find/Macros/skull.rst
  • AutoBot/Find/Macros/star.rst
  • AutoBot/Find/Macros/tibia.rst
  • AutoBot/Find/Macros/tooth.rst
  • AutoBot/Find/desktop.ini
  • AutoBot/Frontend.ini
  • AutoBot/Gathering.ini
  • AutoBot/ImageSearchDLL.dll
    .dll windows:4 windows x86 arch:x86

    ad27dc942a7cdd2950ec7dc392af63b7


    Headers

    Imports

    Exports

    Sections

  • AutoBot/Metallurgy.ini
  • AutoBot/Mining.ini
  • AutoBot/Restoration.ini
  • AutoBot/Screen Capture.exe
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

  • AutoBot/Source/AutoBot.au3
    .ps1
  • AutoBot/Source/EgoFeeder.au3
    .ps1
  • AutoBot/Source/File.au3
    .ps1
  • AutoBot/Source/FileConstants.au3
  • AutoBot/Source/Find/Images/desktop.ini
  • AutoBot/Source/Find/Images/gui/desktop.ini
  • AutoBot/Source/Find/Images/gui/gui.bmp
  • AutoBot/Source/Find/Images/gui/splash.ico
  • AutoBot/Source/Find/Images/gui/splash.png
    .png
  • AutoBot/Source/Find/desktop.ini
  • AutoBot/Source/Frontend.ini
  • AutoBot/Source/GUICtrl_SetResizing.au3
    .ps1
  • AutoBot/Source/GUIScroll.au3
    .ps1
  • AutoBot/Source/GUIScrollBars_Ex.au3
    .ps1
  • AutoBot/Source/GUIScrollbars_Size.au3
    .ps1
  • AutoBot/Source/GuiButton.au3
  • AutoBot/Source/IE.au3
    .ps1
  • AutoBot/Source/ImageSearch - Copy.au3
  • AutoBot/Source/ImageSearch.au3
  • AutoBot/Source/Misc.au3
    .ps1
  • AutoBot/Source/Screen Capture.au3
    .ps1
  • AutoBot/Source/Tailor Minigame.au3
    .ps1
  • AutoBot/Source/TestArea.au3
  • AutoBot/Source/UDFGlobalID.au3
    .ps1
  • AutoBot/Source/Uninstall AutoBot.au3
  • AutoBot/Source/Update AutoBot.au3
    .ps1
  • AutoBot/Source/Update AutoBot1.au3
    .ps1
  • AutoBot/Source/WinAPI.au3
  • AutoBot/Source/WinAPIError.au3
  • AutoBot/Source/WinAPIGdi.au3
    .ps1
  • AutoBot/Source/_XMLDomWrapper.au3
  • AutoBot/Source/config.ini
  • AutoBot/Source/desktop.ini
  • AutoBot/Source/summonPet.au3
    .ps1
  • AutoBot/Source/vkConstants.au3
  • AutoBot/Tailor Minigame.exe
    .exe windows:4 windows x86 arch:x86

    2a3100a777f218dc13b45804af8d5e54


    Headers

    Imports

    Sections

  • AutoBot/UnRAR.exe
    .exe windows:5 windows x86 arch:x86

    f2375eaa67e292850b2548625e315731


    Code Sign

    Headers

    Imports

    Sections

  • AutoBot/Update AutoBot.au3
    .ps1
  • AutoBot/Update AutoBot.exe
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

  • AutoBot/Update AutoBot1.exe
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

  • AutoBot/config.ini
  • AutoBot/desktop.ini
  • AutoBot/error.wav
  • AutoBot/found.wav
  • AutoBot/summonPet.exe
    .exe windows:5 windows x86 arch:x86

    870b8e75c7190e202e9c6c81dff1040c


    Headers

    Imports

    Sections

  • AutoBot/version.ini
  • Support/Readme.htm
    .html
  • Support/TeamViewerQS.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:5 windows x86 arch:x86

    6b9d096578bad49648d82fb5a245a197


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TvGetVersion.dll
    .dll windows:4 windows x86 arch:x86

    900a86e785ca72a5b07f29f42e07df34


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:4 windows x86 arch:x86

    9c8bb65ecbb91da1f2ebb6ae7a714ed0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/wincheck.ini
  • $_3_/tvqjfiles.7z
    .7z
  • TeamViewer.exe
    .exe windows:5 windows x86 arch:x86

    a60aad85fcc566e5189544c7659af6e8


    Code Sign

    Headers

    Imports

    Sections

  • TeamViewer_Desktop.exe
    .exe windows:5 windows x86 arch:x86

    aae008fedf9d6bda78c9594d154f6362


    Code Sign

    Headers

    Imports

    Sections

  • TeamViewer_Resource_en.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_StaticRes.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • tv_w32.dll
    .dll windows:5 windows x86 arch:x86

    f027d9689591ab736abce43f1c3131bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tv_w32.exe
    .exe windows:5 windows x86 arch:x86

    e79cba6493675f78dbbc57ef2a01d2c0


    Code Sign

    Headers

    Imports

    Sections

  • tv_x64.dll
    .dll windows:5 windows x64 arch:x64

    359463417812f10db007e16b7178b4bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tv_x64.exe
    .exe windows:5 windows x64 arch:x64

    1aaa6812bbf8c1cba2276cc1a170d67b


    Code Sign

    Headers

    Imports

    Sections

  • Support/Video Tutorial.url
  • Support/chat.html
    .html .js polyglot
  • Support/readme.txt
  • Support/[email protected]
  • Uninstall AutoBot.exe
    .exe windows:5 windows x86 arch:x86

    870b8e75c7190e202e9c6c81dff1040c


    Headers

    Imports

    Sections

  • Update AutoBot.exe
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

  • Update AutoBot1.exe
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections