General

  • Target

    1c681c9ae94281673fa9bdf08dc0f8ee_JaffaCakes118

  • Size

    16.5MB

  • MD5

    1c681c9ae94281673fa9bdf08dc0f8ee

  • SHA1

    9432b0f0f26d55232ec19b0c4efaed4c03efc240

  • SHA256

    8d87897242b12a5327ce2f4d6b5087a9a7c6071722c34e849b95730d6b7c1134

  • SHA512

    011de9f8ec808ff93c13d809dc2eea5bdad26308580a56b068fa2c9c9e948c1bbf6092fe95e085963a84fe1e5bbd68d9aa4e6c374dbdfb0b6dce7e90695146b8

  • SSDEEP

    393216:yT8WvoJ5bUouU0x9//O/Tssgkj9QGf+bpgckJz+oEC/bE:S6J5bM//O/47LlTkJz+cQ

Score
7/10

Malware Config

Signatures

  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 31 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c681c9ae94281673fa9bdf08dc0f8ee_JaffaCakes118
    .zip
  • l2text/server_help.htm
  • system/ALAudio.dll
    .dll windows:4 windows x86 arch:x86

    8e42d296e9fe242e90224190b6a790ce


    Headers

    Imports

    Exports

    Sections

  • system/ALAudio.int
  • system/Core.dll
    .dll windows:4 windows x86 arch:x86

    dce8b86b91c27f6a28086d6b632ad31f


    Headers

    Imports

    Exports

    Sections

  • system/Core.u
  • system/D3DDrv.dll
    .dll windows:4 windows x86 arch:x86

    8ba3d16902c41c11d35476aac955d102


    Headers

    Imports

    Exports

    Sections

  • system/Editor.u
  • system/Engine.int
  • system/Engine.u
  • system/Env.int
  • system/Fire.dll
    .dll windows:4 windows x86 arch:x86

    80fc6a1a8dbf2fb360c95ccf3aa5c88d


    Headers

    Imports

    Exports

    Sections

  • system/Fire.u
  • system/GameGuard.des
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • system/GamePlay.u
  • system/IpDrv.dll
    .dll windows:4 windows x86 arch:x86

    95bfed20ee86e20a82fa8b88c18ee3fd


    Headers

    Imports

    Exports

    Sections

  • system/IpDrv.u
  • system/L2.ini
  • system/L2CompiledShader.bin
  • system/Lineage2us.ini
  • system/LineageDeco.u
  • system/LineageMonster.int
  • system/LineageMonster2.u
  • system/LineageMonster3.int
  • system/LineageMonster3.u
  • system/LineageNpc.int
  • system/LineageNpc.u
  • system/LineageNpc2.u
  • system/LineageNpcEv.u
  • system/LineageVehicle.u
  • system/LineageWarrior.u
  • system/Localization.ini
  • system/NWindow.dll
    .dll windows:4 windows x86 arch:x86

    7ed58c66da0e35d0c281d0afe132b553


    Headers

    Imports

    Exports

    Sections

  • system/Option.ini
  • system/TTFontInfo.ini
  • system/Thumbs.db
  • system/UDebugMenu.u
  • system/UWindow.u
  • system/User.ini
  • system/WinDrv.dll
    .dll windows:4 windows x86 arch:x86

    b85397df4bca0b362c0059fb2625e768


    Headers

    Imports

    Exports

    Sections

  • system/Window.dll
    .dll windows:4 windows x86 arch:x86

    8c09a51f2b36d6e3944fc8488cafee2a


    Headers

    Imports

    Exports

    Sections

  • system/WindowsInfo.ini
  • system/actionname-e.dat
  • system/armorgrp.dat
  • system/asiahm-medium.ttf
  • system/bighead.int
  • system/castlename-e.dat
  • system/chargrp.dat
  • system/chatfilter.ini
  • system/classinfo-e.dat
  • system/clientdata.dat
  • system/cloak.int
  • system/commandname-e.dat
  • system/core.int
  • system/creditfont.gly
  • system/creditgrp-e.dat
  • system/defopenal32.dll
    .dll windows:4 windows x86 arch:x86

    a13be8f15d30f1cb1441fbb991095e15


    Headers

    Imports

    Exports

    Sections

  • system/dsetup.dll
    .dll windows:4 windows x86 arch:x86

    2eabe9054cad5152567f0699947a2c5b


    Headers

    Imports

    Exports

    Sections

  • system/encvag.dll
    .dll windows:4 windows x86 arch:x86

    a268499ce7d6f3e663f7366ce8d74977


    Headers

    Imports

    Exports

    Sections

  • system/engine.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • system/entereventgrp.dat
  • system/env
  • system/etcitemgrp.dat
  • system/eula-e.dat
  • system/gametip-e.dat
  • system/hair.int
  • system/hairaccessarygrp.dat
  • system/hairaccessorylocgrp.dat
  • system/hairgrp.dat
  • system/helmetgrp.dat
  • system/hennagrp-e.dat
  • system/hi2
  • system/huntingzone-e.dat
  • system/ifc23.dll
    .dll windows:4 windows x86 arch:x86

    bd50fe7fdb58744c65b849e157dca30c


    Headers

    Imports

    Exports

    Sections

  • system/interface.u
  • system/interface.xdat
  • system/ipdrv.int
  • system/itemname-e.dat
  • system/itemname-ea.dat
  • system/l2.exe
    .exe windows:4 windows x86 arch:x86

    76201e9d234c80048e4994fc2b3a84d6


    Headers

    Imports

    Exports

    Sections

  • system/l2.int
  • system/l2forecf.ffe
  • system/largefont-e.gly
  • system/largefont.gly
  • system/lineagecreature.dll
    .dll windows:4 windows x86 arch:x86

    86a73e5ca23dbcad5e6e78b9c9c7a74f


    Headers

    Imports

    Exports

    Sections

  • system/lineagecreature.u
  • system/lineageeffect.u
  • system/lineageenv.dll
    .dll windows:4 windows x86 arch:x86

    b46ff09e85b15218310bb84e224ed317


    Headers

    Imports

    Exports

    Sections

  • system/lineageenv.u
  • system/lineagemonster.u
  • system/lineagemonster2.int
  • system/lineagenpc2.int
  • system/lineagewarrior.int
  • system/logongrp.dat
  • system/mobskillanimgrp.dat
  • system/msxml4.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    c15ed04b7f96417436d03d1ab8b9e327


    Headers

    Imports

    Exports

    Sections

  • system/msxml4a.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • system/msxml4r.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • system/musicinfo.dat
  • system/npcgrp.dat
  • system/npcname-e.dat
  • system/npkcrypt.dll
    .dll windows:4 windows x86 arch:x86

    c704036ad0838314940c7d1b0ecae505


    Headers

    Imports

    Exports

    Sections

  • system/npkcrypt.sys
    .sys windows:5 windows x86 arch:x86

    2db22becfe595b3a63cf88e7c6a32f33


    Headers

    Imports

    Sections

  • system/npkcrypt.vxd
  • system/npkcusb.sys
    .sys windows:5 windows x86 arch:x86

    74b26dd53b6ea6032ac7ce83de54e348


    Headers

    Imports

    Sections

  • system/npkpdb.dll
    .dll windows:4 windows x86 arch:x86

    19d4374f3e0c08ff9cdb4826b422ae5e


    Headers

    Imports

    Exports

    Sections

  • system/nwindow.u
  • system/obscene-e.dat
  • system/ogg.dll
    .dll windows:4 windows x86 arch:x86

    ae8296446b2dd8fef8a9215f21142275


    Headers

    Imports

    Exports

    Sections

  • system/openal32.dll
    .dll windows:4 windows x86 arch:x86

    bc81b622121c4235a8858ecacac0371b


    Headers

    Imports

    Exports

    Sections

  • system/optiondata_client-e.dat
  • system/orc.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • system/questname-e.dat
  • system/raiddata-e.dat
  • system/recipe-c.dat
  • system/s_info.ini
  • system/security.exe
    .exe windows:4 windows x86 arch:x86

    2eabe9054cad5152567f0699947a2c5b


    Headers

    Imports

    Exports

    Sections

  • system/servername-e.dat
  • system/skillgrp.dat
  • system/skillname-e.dat
  • system/skillsoundgrp.dat
  • system/smallfont-e.gly
  • system/smallfont.gly
  • system/soulshot.int
  • system/staticobject-e.dat
  • system/symbolname-e.dat
  • system/sysstring-e.dat
  • system/systemmsg-e.dat
  • system/systemmsg-e2.dat
  • system/systemmsg-vn.dat
  • system/timeenv0.int
  • system/timeenv1.int
  • system/timeenv2.int
  • system/timeenv3.int
  • system/variationeffectgrp-e.dat
  • system/vorbis.dll
    .dll windows:4 windows x86 arch:x86

    25cd3b04205be80ec0b9c99842bbbc88


    Headers

    Imports

    Exports

    Sections

  • system/vorbisfile.dll
    .dll windows:4 windows x86 arch:x86

    36a2b8a8ffca52dfff232da71c300948


    Headers

    Imports

    Exports

    Sections

  • system/weapongrp.dat
  • system/wform.bm
  • system/window.int
  • system/windrv.int
  • system/wrap_oal.dll
    .dll windows:4 windows x86 arch:x86

    2fa42f35ffe092585a1c6ec122db6c82


    Headers

    Imports

    Exports

    Sections

  • system/zonename-e.dat