Overview

overview

3

Static

static

3

Scripts/RunTitle.js

windows7-x64

3

Scripts/RunTitle.js

windows10-2004-x64

3

inject.dll

windows7-x64

1

inject.dll

windows10-2004-x64

1

l2phx.exe

windows7-x64

1

l2phx.exe

windows10-2004-x64

1

newxor.dll

windows7-x64

3

newxor.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    609f55f571b11d53b52021d7e67f58e5_JaffaCakes118

  • Size

    572KB

  • MD5

    609f55f571b11d53b52021d7e67f58e5

  • SHA1

    8d331c4302e7312731b3d29fc27882be85250e36

  • SHA256

    5c1b830cc03a917da8dba992a63f973933028241b6960c91cc50f7f9fb2bbe4a

  • SHA512

    519b2a192c7eab8fe69d295f499ea9cb0e6581a3ecc3273d7611fed14c2e706d2d5d4e68c86330508234a11854757392861ddf45d5c44fb0878298881e7e13c6

  • SSDEEP

    12288:9MEJYb0vbjczg3QOGTu5B1nL2x7cgjFLHigRrKNLIS:exb0mTE1qj5HVe5IS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 609f55f571b11d53b52021d7e67f58e5_JaffaCakes118
    .rar
  • ItemsID.ini
  • Options.ini
  • Packets.ini
  • Scripts/Anti target.txt
  • Scripts/Auto target PK.txt
  • Scripts/AutoTarget.txt
  • Scripts/Char Info.txt
  • Scripts/Chat.txt
  • Scripts/Doors action.txt
  • Scripts/FakeGM.txt
  • Scripts/Invisible.txt
  • Scripts/Magaz999Plus.txt
  • Scripts/Radar.txt
  • Scripts/RunTitle.txt
    .js
  • SkillsID.ini
  • inject.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • l2phx.exe
    .exe windows:4 windows x86 arch:x86

    8b3dc1d08991e22b6675c6af93a3adac


    Headers

    Imports

    Sections

  • newxor.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections