FuncTst1
FuncTst2
FuncTst3
FuncTst4
General
-
Target
27cb01248d9daf6cb3e0dcfb04d7fb89_JaffaCakes118
-
Size
3.2MB
-
MD5
27cb01248d9daf6cb3e0dcfb04d7fb89
-
SHA1
88595b4239fcb19c005ce3093d1f9fc9b6aa0041
-
SHA256
d229aa1191ddf97f1a10ef63d5893c25ceae3e1abb4b9184f920945c9cc21c5d
-
SHA512
ca3e29ffec610187c5213651ff0e2bc593695f0326990d2cb470cde93dbfd1b9913ff23484ed204f1b1c29c7a6f86af5341207532d576e1cf733f27878deb754
-
SSDEEP
98304:/IELzIqgD6y/zKzTKpnktf/d5BrwMCrbL:AEODJ+HKpkR/dzSH
Score
3/10
Malware Config
Signatures
-
Unsigned PE 7 IoCs
Checks for missing Authenticode signature.
Files
-
27cb01248d9daf6cb3e0dcfb04d7fb89_JaffaCakes118
-
!readme.txt
-
!wp505f.txt
-
!wp506f.txt
-
!wp507f.txt
-
MPcfg.ini
-
MPinj.dll
99a40a60b0b306d46c112f27ae5034ec
Headers
Imports
Sections
-
MiniProxer.exe
7926c3261c7df15783629dc05c3f5f08
Headers
Imports
Sections
-
ScriptTester.txt
-
WP507F.exe
Headers
Sections
-
data/filter.ini
-
data/packets/T2ItemsID.ini
-
data/packets/T2SkillsID.ini
-
data/packets/T2SysMsgID.ini
-
data/packets/T2misc.ini
-
data/packets/T2packets.fsc
-
data/packets/T2packets.xml
-
data/packets/T2packetsC4.ini
-
data/packets/T2packetsC5.ini
-
data/packets/T2packetsCI.ini
-
data/packets/T3packets.fsc
-
data/packets/T3packets.ini
-
data/packets/pckinfo.ini
-
data/shost.ini
-
data/shost.ini~
-
data/sipn.dat
-
data/slist.ini
-
data/slist.ini~
-
dll/FastMM4.pas
-
dll/FastMM4Messages.pas
-
dll/FastMM4Options.inc
-
dll/FastMM4_FAQ.txt
-
dll/FastMM4_Readme.txt
-
dll/gDLL-ex1.fsc
-
dll/source/tstdll0.dll
Headers
Exports
Sections
-
dll/source/tstdll0.dpr
-
dll/source/tstdll5.dll
Headers
Exports
Sections
-
dll/source/tstdll5.dpr
-
dll/tstdll0.dll
Headers
Exports
Sections
-
dll/tstdll0.dpr
-
dll/tstdll5.dll
Headers
Exports
Sections
-
dll/tstdll5.dpr
-
doc/!readme
-
doc/WP (Walker Patcher) - что и как (c) Sauron.htm
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/Sauron100x89.JPG
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/aa.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/ac.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/banner-88x31-rambler-black2.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/btm_base.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/cat_top_ls.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/cat_top_rs.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/center_header.jpg
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/collapse_thead.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/footer_ls.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/footer_rs.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/iSkin_Black_x.css
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/index.php
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/left_header.jpg
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/menu_open.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/mode_hybrid.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/mode_linear.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/mode_threaded.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/nav_cal.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/nav_cp.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/nav_faq.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/nav_home.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/nav_ls.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/nav_members.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/nav_menu.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/nav_rs.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/nav_rs_end.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/nav_search.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/navbits_finallink.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/navbits_start.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/post_old.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/post_thanks.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/printer.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/rating_1.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/rating_2.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/rating_3.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/rating_4.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/rating_5.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/reputation.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/right_header.jpg
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/sendtofriend.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/subscribe.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/threadclosed.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/top100.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/user_offline.gif
-
doc/WP (Walker Patcher) - что и как (c) Sauron_files/wp8831.gif
-
doc/[!] PPC User-Manual - 1.mht
-
http://allcheats.ru/showpost.php?p=12245&postcount=18
-
http://allcheats.ru/showthread.php?t=22
-
http://saur.x33.ru/
-
http://saur.x33.ru/upload/sc32r240.exe
-
http://www.ruscript.net/
-
http://www.satspace.ru/uploaded/permeo.security.driver.v.4.2.6.rar
-
http://www.vbulletin.net.ru/
-
http://www.zcarot.com/
-
http://x33.ru/
- Show all
-
-
attachment-10
-
attachment-11
-
attachment-12
-
attachment-13
-
attachment-14
-
attachment-15
-
attachment-16
-
attachment-17
-
attachment-18
-
attachment-19
-
attachment-2
-
attachment-20
-
attachment-21
-
attachment-22
-
attachment-23
-
attachment-24
-
attachment-25
-
attachment-26
-
attachment-27
-
attachment-28
-
attachment-29
-
attachment-3
-
attachment-30
-
attachment-31
-
attachment-32
-
attachment-33
-
attachment-34
-
attachment-35
-
attachment-36
-
attachment-37
-
attachment-38
-
attachment-39
-
attachment-4
-
attachment-40
-
attachment-41
-
attachment-42
-
attachment-43
-
attachment-44
-
attachment-45
-
attachment-46
-
attachment-47
-
attachment-48
-
attachment-49
-
attachment-5
-
attachment-50
-
attachment-51
-
attachment-52
-
attachment-53
-
attachment-54
-
attachment-55
-
attachment-56
-
attachment-57
-
attachment-58
-
attachment-59
-
attachment-6
-
attachment-60
-
attachment-61
-
attachment-62
-
attachment-63
-
attachment-64
-
attachment-65
-
attachment-66
-
attachment-7
-
attachment-8
-
attachment-9
-
email-html-1.txt
-
doc/[!] PPC User-Manual - 2.mht
-
http://www.ruscript.net/
-
http://www.vbulletin.net.ru/
-
http://www.zcarot.com/
-
http://x33.ru/
-
http://x33.ru/saur/for/archive/index.php
-
http://x33.ru/saur/for/calendar.php
-
http://x33.ru/saur/for/faq.php
-
http://x33.ru/saur/for/forumdisplay.php?do=markread
-
http://x33.ru/saur/for/forumdisplay.php?f=1
- Show all
-
-
attachment-10
-
attachment-11
-
attachment-12
-
attachment-13
-
attachment-14
-
attachment-15
-
attachment-16
-
attachment-17
-
attachment-18
-
attachment-19
-
attachment-2
-
attachment-20
-
attachment-21
-
attachment-22
-
attachment-23
-
attachment-24
-
attachment-25
-
attachment-26
-
attachment-27
-
attachment-28
-
attachment-29
-
attachment-3
-
attachment-30
-
attachment-31
-
attachment-32
-
attachment-33
-
attachment-34
-
attachment-35
-
attachment-36
-
attachment-37
-
attachment-38
-
attachment-39
-
attachment-4
-
attachment-40
-
attachment-41
-
attachment-42
-
attachment-43
-
attachment-44
-
attachment-45
-
attachment-46
-
attachment-47
-
attachment-48
-
attachment-49
-
attachment-5
-
attachment-50
-
attachment-51
-
attachment-52
-
attachment-53
-
attachment-54
-
attachment-55
-
attachment-6
-
attachment-7
-
attachment-8
-
attachment-9
-
email-html-1.txt
-
doc/[] Гайд про Wp Ppc (самое начало) - Forums.mht
-
http://imajr.com/10.bmp_68250
-
http://imajr.com/11.bmp_68284
-
http://imajr.com/12.bmp_68300
-
http://imajr.com/13.bmp_68365
-
http://imajr.com/15.bmp_68381
-
http://imajr.com/16.bmp_68398
-
http://imajr.com/7.bmp_68226
-
http://imajr.com/9.bmp_68243
-
http://img267.imageshack.us/my.php?image=27994823cd4.png
- Show all
-
-
attachment-10
-
attachment-2
-
attachment-25
-
attachment-26
-
attachment-27
-
attachment-28
-
attachment-29
-
attachment-3
-
attachment-30
-
attachment-4
-
attachment-45
-
attachment-46
-
attachment-47
-
attachment-48
-
attachment-49
-
attachment-5
-
attachment-50
-
attachment-51
-
attachment-52
-
attachment-53
-
attachment-54
-
attachment-55
-
attachment-56
-
attachment-57
-
attachment-58
-
attachment-59
-
attachment-6
-
attachment-60
-
attachment-61
-
attachment-62
-
attachment-63
-
attachment-64
-
attachment-65
-
attachment-66
-
attachment-67
-
attachment-68
-
attachment-69
-
attachment-7
-
attachment-70
-
attachment-71
-
attachment-72
-
attachment-73
-
attachment-74
-
attachment-75
-
attachment-76
-
attachment-77
-
attachment-78
-
attachment-79
-
attachment-8
-
attachment-80
-
attachment-81
-
attachment-82
-
attachment-9
-
email-html-1.txt
-
doc/[] Пакетный уровень RF Online для новичков - x33 Forums.mht
-
http://depositfiles.com/files/1042308
-
http://depositfiles.com/files/1042314
-
http://download.sysinternals.com/Files/TcpView.zip
-
http://ifolder.ru/3393762
-
http://pyldin.narod.ru/asc_tab.gif)
-
http://rf-cheats.ru/forum/showthread.php?t=754
-
http://rfonline.ru/
-
http://saur.x33.ru/
-
http://saur.x33.ru/MiniProxer.rar)
- Show all
-
-
attachment-12
-
attachment-19
-
attachment-2
-
attachment-20
-
attachment-21
-
attachment-22
-
attachment-23
-
attachment-24
-
attachment-25
-
attachment-26
-
attachment-27
-
attachment-28
-
attachment-29
-
attachment-3
-
attachment-30
-
attachment-31
-
attachment-32
-
attachment-33
-
attachment-34
-
attachment-35
-
attachment-36
-
attachment-37
-
attachment-38
-
attachment-39
-
attachment-4
-
attachment-40
-
attachment-41
-
attachment-42
-
attachment-43
-
attachment-44
-
attachment-45
-
attachment-46
-
attachment-47
-
attachment-48
-
attachment-49
-
attachment-5
-
attachment-50
-
attachment-51
-
attachment-52
-
attachment-53
-
attachment-54
-
attachment-55
-
attachment-56
-
attachment-57
-
attachment-58
-
attachment-59
-
attachment-6
-
attachment-60
-
attachment-61
-
attachment-7
-
attachment-8
-
attachment-9
-
email-html-1.txt
-
doc/k12.gif
-
doc/k13.gif
-
token.wp
-
token.~wp
-
wpcfg.ini
-
wpcfg.ini~
-
wpinfo.dat
-
wpsc/DEMO/LA2/!LS1em.xml.txt
-
wpsc/DEMO/LA2/LS1em.xml
-
wpsc/DEMO/LA2/demo1.sc
-
wpsc/DEMO/LA2/demo2.sc
-
wpsc/DEMO/LA2/demo3.sc
-
wpsc/DEMO/LA2/demoFS2.fsc
-
wpsc/DEMO/LA2/demoReklam.fsc
-
wpsc/DEMO/LA2/demo_la2-endecGS-4.fsc
-
wpsc/DEMO/LA2/demo_la2-endecGS-5.fsc
-
wpsc/DEMO/LA2/dropitem1.sc
-
wpsc/DEMO/LA2/fs-demochat1.fsc
-
wpsc/DEMO/LA2/target_attacker.sc
-
wpsc/DEMO/LA2/target_radar.sc
-
wpsc/DEMO/RFO/RFO-GetChars-1.fsc
-
wpsc/DEMO/d5-delay.sc
-
wpsc/DEMO/demoFS1.fsc
-
wpsc/DEMO/gDLL-ex1.fsc
-
wpsc/socks5.sc
-
wpstr.ini