General

  • Target

    JJSploit_8.1.0_x64-setup.exe

  • Size

    6.8MB

  • MD5

    c400051ded2fe96156a242eea8846890

  • SHA1

    89e426f253b7af9df68fac856214592da44555de

  • SHA256

    9bf9cdfe3da7a30b319c6dc1c25967ea68c9025c0115917bc09ddfc0ac956402

  • SHA512

    2f84eecf63fac9851368e66884bab3f1b8b4b25369ca18ccca7eaf2525936d573350e3c16273ef763a5df09793cd1f4497bc59d00d2179ad262d65548122515c

  • SSDEEP

    196608:hDnpCY99wH71ojF093JhGqUfmvQn1mWxBuI7FmK:hDAY9uHqBWfkfmvQrxBX

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • JJSploit_8.1.0_x64-setup.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    ed06d61f6957c32cd324837726a5a070


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll windows:6 windows x86 arch:x86

    17cb20871354b907f678c7c220e4ca60


    Headers

    Imports

    Exports

    Sections

  • JJSploit.dll
    .dll windows:6 windows x64 arch:x64

    ac435dfa812fddee99bbf7a986186d1d


    Headers

    Imports

    Exports

    Sections

  • JJSploit.exe
    .exe windows:6 windows x64 arch:x64

    324e1a225eb27713316520202dc3a550


    Headers

    Imports

    Sections

  • libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • resources/luascripts/animations/dab.lua
  • resources/luascripts/animations/energizegui.lua
  • resources/luascripts/animations/jumpland.lua
  • resources/luascripts/animations/levitate.lua
  • resources/luascripts/animations/walkthrough.lua
  • resources/luascripts/beesim/autodig.lua
  • resources/luascripts/general/aimbot.lua
    .js
  • resources/luascripts/general/chattroll.lua
  • resources/luascripts/general/fly.lua
  • resources/luascripts/general/god.lua
  • resources/luascripts/general/infinitejump.lua
  • resources/luascripts/general/magnetizeto.lua
  • resources/luascripts/general/multidimensionalcharacter.lua
  • resources/luascripts/general/noclip.lua
    .js
  • resources/luascripts/general/teleportto.lua
  • resources/luascripts/general/tptool.lua
  • resources/luascripts/jailbreak/criminalesp.lua
  • resources/luascripts/jailbreak/policeesp.lua
  • resources/luascripts/jailbreak/removewalls.lua
  • resources/luascripts/jailbreak/walkspeed.lua
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll windows:6 windows x86 arch:x86

    17cb20871354b907f678c7c220e4ca60


    Headers

    Imports

    Exports

    Sections

  • xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections