Overview

overview

3

Static

static

3

l2phx.3.5....er.dll

windows7-x64

3

l2phx.3.5....er.dll

windows10-2004-x64

3

l2phx.3.5....ls.dll

windows7-x64

3

l2phx.3.5....ls.dll

windows10-2004-x64

3

l2phx.3.5....ct.dll

windows7-x64

1

l2phx.3.5....ct.dll

windows10-2004-x64

1

l2phx.3.5....ph.exe

windows7-x64

1

l2phx.3.5....ph.exe

windows10-2004-x64

1

l2phx.3.5....ib.dll

windows7-x64

3

l2phx.3.5....ib.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    6dc1b34b482c1767b76019203c74e0d1_JaffaCakes118

  • Size

    2.2MB

  • MD5

    6dc1b34b482c1767b76019203c74e0d1

  • SHA1

    0a87c402f69f615766887b0431bbba3dca82cad4

  • SHA256

    1886ad76db912ea8810029d9f2be3dbbba552a7ab508423eefb71f7a6616c268

  • SHA512

    7a0c89a2b5060a3fa6daf2203dd009e3bcd286c95a7a252aa2940d346ba2a2356dd39ac0b9e398dc8302c61b9c1a3cd5aad11c2b2be66cf32ea2954887ac225d

  • SSDEEP

    49152:DIhqj+4+OV8mNufGA6pvBge6f4eHMn3eI8+ftCWBFSlSbvemc:c0j+4+OZuOA6PgVfSF1clIemc

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 6dc1b34b482c1767b76019203c74e0d1_JaffaCakes118
    .rar
  • l2phx.3.5.33.166/LSPprovider.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • l2phx.3.5.33.166/Plugins/x_als.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • l2phx.3.5.33.166/inject.dll
    .dll windows:4 windows x86 arch:x86

    244666771e33704ccb72afd6de3962c4


    Headers

    Imports

    Sections

  • l2phx.3.5.33.166/l2ph.exe
    .exe windows:4 windows x86 arch:x86

    6e6f5a04361300b4f02d8050c5e16ee0


    Headers

    Imports

    Exports

    Sections

  • l2phx.3.5.33.166/pcrelib.dll
    .dll windows:4 windows x86 arch:x86

    7938cbdc2ac68c2217ff14210a949bca


    Headers

    Imports

    Exports

    Sections

  • l2phx.3.5.33.166/settings/ClassId.ini
  • l2phx.3.5.33.166/settings/ClassIdEng.ini
  • l2phx.3.5.33.166/settings/ItemsID.ini
  • l2phx.3.5.33.166/settings/ItemsIdEng.ini
  • l2phx.3.5.33.166/settings/NpcsId.ini
  • l2phx.3.5.33.166/settings/NpcsIdEng.ini
  • l2phx.3.5.33.166/settings/PacketsFreya.ini
  • l2phx.3.5.33.166/settings/PacketsGracia.ini
  • l2phx.3.5.33.166/settings/PacketsGraciaEpilog.ini
  • l2phx.3.5.33.166/settings/PacketsGraciaFinal.ini
  • l2phx.3.5.33.166/settings/SkillsId.ini
  • l2phx.3.5.33.166/settings/SkillsIdEng.ini
  • l2phx.3.5.33.166/settings/SysMsgId.ini
  • l2phx.3.5.33.166/settings/SysMsgIdEng.ini
  • l2phx.3.5.33.166/settings/augmentsid.ini
  • l2phx.3.5.33.166/settings/packetsAion.ini
  • l2phx.3.5.33.166/settings/packetsInterlude.ini
  • l2phx.3.5.33.166/settings/packetsc4.ini
  • l2phx.3.5.33.166/settings/packetsc5.ini