General

  • Target

    46e3b92a6244fdaf1112ef9dfea919ca_JaffaCakes118

  • Size

    2.5MB

  • MD5

    46e3b92a6244fdaf1112ef9dfea919ca

  • SHA1

    dda9e47af33a70c993c8c5c81868817a5d23620d

  • SHA256

    32bd7ac486c53e6c276528b7993c6206efbe5c0b97b26ea80f756a7a6c788575

  • SHA512

    33f237b019f2b883a99848894fa8050da8caca8067b6f68a239310c6c6156920a3b9c6846fe9df4151623b5b3e33dd19821d1d257a8e0d6d0451433f64644882

  • SSDEEP

    49152:A2DfSEVCLlSqrGAs5bhmeLkR31Y1p2lihSi45iRdsJd7rznb2M:Kkqrzs5b1Ila1gl6SeYdnbH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 42 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 46e3b92a6244fdaf1112ef9dfea919ca_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    48cfa0ea7e353e4a7dd23572da8374ef


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/installPageTibiaClient.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $_2_/libdb45.dll
    .dll windows:4 windows x86 arch:x86

    628d63a6a8b706d1d42a0ea5b05bb566


    Headers

    Imports

    Exports

    Sections

  • $_2_/tibiaautoinject2.dll
    .dll windows:4 windows x86 arch:x86

    8615c5bce7081219e1d4fa179e4599aa


    Headers

    Imports

    Exports

    Sections

  • $_2_/xerces-c_2_7.dll
    .dll windows:4 windows x86 arch:x86

    0e4f91c66d48b8da69b0383f8e2dcc5b


    Headers

    Imports

    Exports

    Sections

  • libdb45.dll
    .dll windows:4 windows x86 arch:x86

    628d63a6a8b706d1d42a0ea5b05bb566


    Headers

    Imports

    Exports

    Sections

  • mods/aiml/1.aiml
    .xml
  • mods/aiml/2.aiml
    .xml
  • mods/aiml/3.aiml
    .xml
  • mods/aiml/4.aiml
    .xml
  • mods/aiml/5.aiml
    .xml
  • mods/aiml/6.aiml
    .xml
  • mods/aiml/8.aiml
    .xml
  • mods/aiml/9.aiml
    .xml
  • mods/aiml/A.aiml
    .vbs .xml polyglot
  • mods/aiml/B.aiml
    .vbs .xml polyglot
  • mods/aiml/C.aiml
    .vbs .xml polyglot
  • mods/aiml/D.aiml
    .vbs .xml polyglot
  • mods/aiml/E.aiml
    .vbs .xml polyglot
  • mods/aiml/F.aiml
    .vbs .xml polyglot
  • mods/aiml/G.aiml
    .vbs .xml polyglot
  • mods/aiml/H.aiml
    .vbs .xml polyglot
  • mods/aiml/I.aiml
    .vbs .xml polyglot
  • mods/aiml/J.aiml
    .vbs .xml polyglot
  • mods/aiml/K.aiml
    .vbs .xml polyglot
  • mods/aiml/L.aiml
    .vbs .xml polyglot
  • mods/aiml/M.aiml
    .vbs .xml polyglot
  • mods/aiml/N.aiml
    .vbs .xml polyglot
  • mods/aiml/O.aiml
    .vbs .xml polyglot
  • mods/aiml/P.aiml
    .vbs .xml polyglot
  • mods/aiml/Q.aiml
    .xml
  • mods/aiml/R.aiml
    .vbs .xml polyglot
  • mods/aiml/S.aiml
    .vbs .xml polyglot
  • mods/aiml/T.aiml
    .vbs .xml polyglot
  • mods/aiml/U.aiml
    .vbs .xml polyglot
  • mods/aiml/V.aiml
    .xml
  • mods/aiml/W.aiml
    .vbs .xml polyglot
  • mods/aiml/X.aiml
    .xml
  • mods/aiml/Y.aiml
    .vbs .xml polyglot
  • mods/aiml/Z.aiml
    .xml
  • mods/aiml/star.aiml
    .vbs .xml polyglot
  • mods/aiml/topics.aiml
    .vbs .xml polyglot
  • mods/aiml/under.aiml
    .vbs .xml polyglot
  • mods/alice.dll
    .dll windows:4 windows x86 arch:x86

    467eb8fb3d2399b8f4b25c39ff3509a5


    Headers

    Imports

    Exports

    Sections

  • mods/creatureinfo-defines.txt
  • mods/mod_aim.dll
    .dll windows:4 windows x86 arch:x86

    080ee2fcb8873b3ecb7270160ec73073


    Headers

    Imports

    Exports

    Sections

  • mods/mod_antylogout.dll
    .dll windows:4 windows x86 arch:x86

    08782986a52aa7cd0f80331f1c055ebd


    Headers

    Imports

    Exports

    Sections

  • mods/mod_autogo.dll
    .dll windows:4 windows x86 arch:x86

    6ac25e15922fbab85d7aa6bd547a3aa3


    Headers

    Imports

    Exports

    Sections

  • mods/mod_cavebot.dll
    .dll windows:4 windows x86 arch:x86

    7c91ef2597e3c2751ead90c907afe82a


    Headers

    Imports

    Exports

    Sections

  • mods/mod_creatureinfo.dll
    .dll windows:4 windows x86 arch:x86

    9882089c4ff85d6619ca0faaa38304d5


    Headers

    Imports

    Exports

    Sections

  • mods/mod_eater.dll
    .dll windows:4 windows x86 arch:x86

    08782986a52aa7cd0f80331f1c055ebd


    Headers

    Imports

    Exports

    Sections

  • mods/mod_fisher.dll
    .dll windows:4 windows x86 arch:x86

    f6843ffee5bb3c4e858ee9aa2f1581c3


    Headers

    Imports

    Exports

    Sections

  • mods/mod_fluid.dll
    .dll windows:4 windows x86 arch:x86

    8e37f47083f808c758ddc35577aeb399


    Headers

    Imports

    Exports

    Sections

  • mods/mod_fps.dll
    .dll windows:4 windows x86 arch:x86

    adc2b3a543e5f89e1cd71426aa99d1fa


    Headers

    Imports

    Exports

    Sections

  • mods/mod_grouping.dll
    .dll windows:4 windows x86 arch:x86

    08782986a52aa7cd0f80331f1c055ebd


    Headers

    Imports

    Exports

    Sections

  • mods/mod_itemconfig.dll
    .dll windows:4 windows x86 arch:x86

    c0b5bc5ca9eaa8bdbc69479fc5059745


    Headers

    Imports

    Exports

    Sections

  • mods/mod_light.dll
    .dll windows:4 windows x86 arch:x86

    a5105943dd515bed979ae93671cb1206


    Headers

    Imports

    Exports

    Sections

  • mods/mod_login.dll
    .dll windows:4 windows x86 arch:x86

    fa053b24f72d2798872488cb2c12a307


    Headers

    Imports

    Exports

    Sections

  • mods/mod_looter.dll
    .dll windows:4 windows x86 arch:x86

    ff893b69740ee964574d7f6d329b3904


    Headers

    Imports

    Exports

    Sections

  • mods/mod_maphack.dll
    .dll windows:4 windows x86 arch:x86

    d295804b7c6c509fec0a49142526e285


    Headers

    Imports

    Exports

    Sections

  • mods/mod_memdebug.dll
    .dll windows:4 windows x86 arch:x86

    9827a1741b4f5b25f9fa7d943f5efa3d


    Headers

    Imports

    Exports

    Sections

  • mods/mod_monstershow.dll
    .dll windows:4 windows x86 arch:x86

    acb653938046a2b04fd8492d6533ffb9


    Headers

    Imports

    Exports

    Sections

  • mods/mod_playerinfo.dll
    .dll windows:4 windows x86 arch:x86

    39828dc34c344aea2a72cc8c0af62149


    Headers

    Imports

    Exports

    Sections

  • mods/mod_responder.dll
    .dll windows:4 windows x86 arch:x86

    3ecfdda955a3f20659e41f62db8a81d2


    Headers

    Imports

    Exports

    Sections

  • mods/mod_restack.dll
    .dll windows:4 windows x86 arch:x86

    b5888fd01a1c47b298c2efc9220eb95d


    Headers

    Imports

    Exports

    Sections

  • mods/mod_runemaker.dll
    .dll windows:4 windows x86 arch:x86

    f4fe395c2d9b59f7e4978159e8842dfc


    Headers

    Imports

    Exports

    Sections

  • mods/mod_showmap.dll
    .dll windows:4 windows x86 arch:x86

    d4d26ad00fcb8024aa537729a316ed99


    Headers

    Imports

    Exports

    Sections

  • mods/mod_spellcaster.dll
    .dll windows:4 windows x86 arch:x86

    789d178e565e932806ccff1f98a6f1db


    Headers

    Imports

    Exports

    Sections

  • mods/mod_team.dll
    .dll windows:4 windows x86 arch:x86

    5669b7f9df5122b15cb95f971a923b6a


    Headers

    Imports

    Exports

    Sections

  • mods/mod_trademon.dll
    .dll windows:4 windows x86 arch:x86

    300114efadabe141ce04b5376631782c


    Headers

    Imports

    Exports

    Sections

  • mods/mod_uh.dll
    .dll windows:4 windows x86 arch:x86

    b6453a034669d0ddae063ac8cb41fdb9


    Headers

    Imports

    Exports

    Sections

  • mods/sound/alarm.wav
  • mods/sound/hploss.wav
  • mods/sound/message.wav
  • mods/std-startup.xml
  • mods/substitutions.xml
  • mods/tibiaauto-creatures.xml
  • mods/tibiaauto-items-7.90.xml
  • mods/tibiaauto-items-7.91.xml
  • mods/tibiaauto-items-7.92.xml
  • mods/tibiaauto-items.xml
  • mods/tibiaauto-responder.xml
  • mods/tibiaauto-tiles.xml
  • mods/tibiaauto_util.dll
    .dll windows:4 windows x86 arch:x86

    79a89b4aa9df3cf6c13aa00e1ffed34e


    Headers

    Imports

    Exports

    Sections

  • mods/tre.dll
    .dll windows:4 windows x86 arch:x86

    54ed3f7c6522bb25c4df1f4476018176


    Headers

    Imports

    Exports

    Sections

  • ta_creatures_c.db
  • tascripts/AntyLogout.py
  • tascripts/AutoFisher.py
  • tascripts/tautil.py
  • tibiaauto.exe
    .exe windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • tibiaautoinject2.dll
    .dll windows:4 windows x86 arch:x86

    8615c5bce7081219e1d4fa179e4599aa


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • xerces-c_2_7.dll
    .dll windows:4 windows x86 arch:x86

    0e4f91c66d48b8da69b0383f8e2dcc5b


    Headers

    Imports

    Exports

    Sections

  • zlib1.dll
    .dll windows:4 windows x86 arch:x86

    7e3560e4dd2deaa398fa039458dd4b4b


    Headers

    Imports

    Exports

    Sections