General

  • Target

    d6c01b695a227ea28f7695a57aecf749_JaffaCakes118

  • Size

    650KB

  • MD5

    d6c01b695a227ea28f7695a57aecf749

  • SHA1

    56e369741fa7632364520b9010c008649e09d6f0

  • SHA256

    401d60fcff9aa3e1b330358b05c9a61a11cb8bd92ea2196e34656aa88698f063

  • SHA512

    bee025a32502b1927143298f8ffb5f2bc8d9ee202fca42dd8b2a2b1d3985d0f3ffe04d0b9e3bf557ca5a8f145c5c202674edbe39493eb3a02cb597835f13008c

  • SSDEEP

    12288:1Grd/npgk37//Q43moHEndQ4/4EDUWYw0T54EdELjwxu5gOlnyp4arkHSzPWE1:md/nz3jY43moL4RUs0T5VuvCTpdYkWE1

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • d6c01b695a227ea28f7695a57aecf749_JaffaCakes118
    .zip
  • Changelog.txt
  • License.txt
  • Patch.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Readme.txt
  • RedVex.dll
    .dll windows:4 windows x86 arch:x86

    997b9a3be966aea6f44497217043ba09


    Headers

    Imports

    Exports

    Sections

  • RedVex.exe
    .exe windows:4 windows x86 arch:x86

    7984beb27d927870532fe9a16894d72e


    Headers

    Imports

    Sections

  • Source Files/Core.rar
    .rar
  • Core/ChatClientPacketMarshal.cpp
  • Core/ChatClientPacketMarshal.h
  • Core/ChatPacketMarshal.cpp
  • Core/ChatPacketMarshal.h
  • Core/ChatProxy.cpp
  • Core/ChatProxy.h
  • Core/ChatServerPacketMarshal.cpp
  • Core/ChatServerPacketMarshal.h
  • Core/Compression.cpp
  • Core/Compression.h
  • Core/CriticalSection.cpp
  • Core/CriticalSection.h
  • Core/GameClientPacketMarshal.cpp
  • Core/GameClientPacketMarshal.h
  • Core/GameProxy.cpp
  • Core/GameProxy.h
  • Core/GameServerPacketMarshal.cpp
  • Core/GameServerPacketMarshal.h
  • Core/Globals.cpp
  • Core/Globals.h
  • Core/IModule.h
  • Core/IPacket.h
  • Core/IProxy.h
  • Core/IProxyPool.h
  • Core/ITextLog.h
  • Core/ModuleLink.cpp
  • Core/ModuleLink.h
  • Core/Monostate.h
  • Core/Monostate.inl
  • Core/Packet.cpp
  • Core/Packet.h
  • Core/PacketMarshal.cpp
  • Core/PacketMarshal.h
  • Core/Plugin.cpp
  • Core/Plugin.h
  • Core/PluginManager.cpp
  • Core/PluginManager.h
  • Core/ProgramLog.cpp
  • Core/ProgramLog.h
  • Core/ProxyThread.cpp
  • Core/ProxyThread.h
  • Core/RealmPacketMarshal.cpp
  • Core/RealmPacketMarshal.h
  • Core/RealmProxy.cpp
  • Core/RealmProxy.h
  • Core/RedVex.sln
  • Core/RedVex.vcproj
    .xml
  • Core/TcpProxy.cpp
  • Core/TcpProxy.h
  • Core/TcpSocket.cpp
  • Core/TcpSocket.h
    .vbs
  • Core/Thread.cpp
  • Core/Thread.h
  • Core/main.cpp