General

  • Target

    789134e9e315d1ac0b8b5a6906366c4b_JaffaCakes118

  • Size

    6.2MB

  • MD5

    789134e9e315d1ac0b8b5a6906366c4b

  • SHA1

    d0e49d72d4d898afec2d924b83b0b850242be05b

  • SHA256

    29ca085d5fddb9532053d93b05cba585df9e50784fa67ec5fdd1a0bb48ac4484

  • SHA512

    da4a58a22e878aea3d8a902586b794f7e2ac1969f42df47726eee40221d84df8a68e6b04ec8b3cb517a0024f304fb4290a776688e2ea8778a9ac1f3df91dd72a

  • SSDEEP

    196608:iLHaWtcZo2jrU74GwWmkiCYgEelmVU5MmtG1E:iWAoU746mMEB2tGE

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • 789134e9e315d1ac0b8b5a6906366c4b_JaffaCakes118
    .rar
  • Interop.SHDocVw.dll
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • LordMt2.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • devil.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • granny2.dll
    .dll windows:4 windows x86 arch:x86

    c24d63a8e29b6bf4b4ae5f7a916ffb8f


    Headers

    Imports

    Exports

    Sections

  • lib/UserDict.pyc
  • lib/__future__.pyc
  • lib/copy_reg.pyc
  • lib/linecache.pyc
  • lib/ntpath.pyc
  • lib/os.pyc
  • lib/site.pyc
  • lib/stat.pyc
  • lib/string.pyc
  • lib/traceback.pyc
  • lib/types.pyc
  • metin2client.dat
  • miles/mss32.dll
    .dll windows:4 windows x86 arch:x86

    1b2a3736acbf394c9ae08b2808ea97fd


    Headers

    Imports

    Exports

    Sections

  • miles/mssa3d.m3d
    .dll windows:4 windows x86 arch:x86

    7f1f75e8fd7377bd4f8a04f00520ef1d


    Headers

    Imports

    Sections

  • miles/mssds3d.m3d
    .dll windows:4 windows x86 arch:x86

    691e62beb59775308bd1049c3a19ea30


    Headers

    Imports

    Sections

  • miles/mssdsp.flt
    .dll windows:4 windows x86 arch:x86

    9b0060aea2739dc740536eff439e4ca8


    Headers

    Imports

    Sections

  • miles/mssdx7.m3d
    .dll windows:4 windows x86 arch:x86

    691e62beb59775308bd1049c3a19ea30


    Headers

    Imports

    Sections

  • miles/msseax.m3d
    .dll windows:4 windows x86 arch:x86

    691e62beb59775308bd1049c3a19ea30


    Headers

    Imports

    Sections

  • miles/mssmp3.asi
    .dll windows:4 windows x86 arch:x86

    113244029ceda204dda9cd578f66b019


    Headers

    Imports

    Sections

  • miles/mssrsx.m3d
    .dll windows:4 windows x86 arch:x86

    306e68433965d44daa210d81c701b9de


    Headers

    Imports

    Sections

  • miles/msssoft.m3d
    .dll windows:4 windows x86 arch:x86

    296e6b50615b88dc8bc64f0ceb280e4a


    Headers

    Imports

    Sections

  • miles/mssvoice.asi
    .dll windows:4 windows x86 arch:x86

    25ef709610c6718a7921d7cbc0c73a25


    Headers

    Imports

    Sections

  • pack/Index
  • pack/Outdoornew.eix
  • pack/Outdoornew.epk
  • pack/root.eix
  • pack/root.epk
  • pack/textureset.eix
  • pack/textureset.epk
  • pack/theyonelegend1_2.eix
  • pack/theyonelegend1_2.epk
  • pack/uiscript.eix
  • pack/uiscript.epk
  • python22.dll
    .dll windows:4 windows x86 arch:x86

    79302f2ce4005a101bd53e3fa5e1d40e


    Headers

    Imports

    Exports

    Sections