General

  • Target

    dab221de0cfbfa8ec9a62fb0d92a283a_JaffaCakes118

  • Size

    11.1MB

  • MD5

    dab221de0cfbfa8ec9a62fb0d92a283a

  • SHA1

    056ea1d57ee8c64387ba3ca8a565ac1d465df36e

  • SHA256

    61bde78faff2f15db4a32cec6b3b9cee53de0d854fb58579c00873ed8c8aea25

  • SHA512

    7181644b011a866cd4133598e6587f5456ec8e8abc82b307aadddcc3221d8d8c79980cba1106e4a219190d55eade0c6f748806828d8d9b25dfa0a129e2cb7acc

  • SSDEEP

    196608:GdPvyiyF0MTFYM4iIWU5jxK1ubpzmhvXs0f4IEq3woCtrMBFWms0I1xyqOScCOe:GRvyiyGWMVW0H8d80wIEP1KC0IbyqDTZ

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • dab221de0cfbfa8ec9a62fb0d92a283a_JaffaCakes118
    .zip
  • Butterfly Rome.exe
    .exe windows:4 windows x86 arch:x86

    e017744773abb625adcffb8a1b56e428


    Headers

    Imports

    Exports

    Sections

  • Data/Cos_Equip.enc
  • Data/Cos_Equip_Rare.enc
  • Data/Cos_Quest.enc
  • Data/Job.wav
  • Data/Name_data.enc
  • Data/Rome_Run.dll
    .dll windows:4 windows x86 arch:x86

    de761d39079ebeba89c3b7d8ea6124dd


    Headers

    Imports

    Exports

    Sections

  • Data/Rome_Win.dll
    .dll windows:4 windows x86 arch:x86

    be036195a13af1f0eb471a9e86aa46df


    Headers

    Imports

    Exports

    Sections

  • Data/Sro.cur
  • Data/Start.wav
  • Data/Stop.wav
  • Data/logo.jpg
    .jpg
  • Data/pcevent_close.jpg
    .jpg
  • Data/pcevent_close_focus.jpg
    .jpg
  • Data/pcevent_close_press.jpg
    .jpg
  • Data/pcevent_window.jpg
    .jpg
  • Data/set.jpg
    .jpg
  • Data/set_focus.jpg
    .jpg
  • Data/set_press.jpg
    .jpg
  • Data/start.jpg
    .jpg
  • Data/start_focus.jpg
    .jpg
  • Data/start_press.jpg
    .jpg
  • Data/stop.jpg
    .jpg
  • Data/stop_focus.jpg
    .jpg
  • Data/stop_press.jpg
    .jpg
  • Rome_App.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Sbot/(version)
  • Sbot/Data.dll
  • Sbot/OgreMain.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Sbot/RomeBotbin.exe
    .exe windows:5 windows x86 arch:x86

    93c0a5837385095075c09af8d96024e2


    Headers

    Imports

    Exports

    Sections

  • Sbot/RomeBotdat.exe
    .exe windows:5 windows x86 arch:x86

    f01aaeb488c50cf5a545a5031a20c407


    Headers

    Imports

    Sections

  • Sbot/data.fpk
  • Sbot/libeay32.dll
    .dll windows:5 windows x86 arch:x86

    0cebee292d8de46c915195e4608514a9


    Headers

    Imports

    Exports

    Sections

  • Sbot/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    2dec2d42421b088bfcddeba53b046464


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Sbot/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0453db624ecaef7c4f3da938cd1d0fc5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Sbot/svrbase.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Sbot/svrcom.dll
    .dll windows:5 windows x86 arch:x86

    7b38cab0553bd09a264e83a8395207fe


    Headers

    Imports

    Exports

    Sections

  • Sbot/svrfun.dll
    .dll windows:5 windows x86 arch:x86

    f111da105b1e5c805de59c8c38637560


    Headers

    Imports

    Exports

    Sections

  • UpdateList.xml
    .xml
  • Updater.exe
    .exe windows:4 windows x86 arch:x86

    715a8ceb2d5835e4aea0fd61c75dee81


    Headers

    Imports

    Sections