Overview

overview

3

Static

static

3

inject.dll

windows7-x64

3

inject.dll

windows10-2004-x64

3

l2pbx.exe

windows7-x64

3

l2pbx.exe

windows10-2004-x64

3

plugins/pl...mo.dll

windows7-x64

3

plugins/pl...mo.dll

windows10-2004-x64

3

plugins/pl...o2.dll

windows7-x64

3

plugins/pl...o2.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbd59181b4ba99f0eeb65c97fa199bc2_JaffaCakes118

  • Size

    933KB

  • MD5

    dbd59181b4ba99f0eeb65c97fa199bc2

  • SHA1

    6ff716303cd8edb9694e103008f976bd14dbcbc8

  • SHA256

    996c8e27ff62594557f5caf0af262eb2731395232dee24512b424e17d14ee988

  • SHA512

    69faf3ec5718007e7eb16205c3a506c9a0735b030bfcf62fc20457b78ac3b4a5c0fea9b0dd63aa75beeb0088ed94555d7a1f1ca989d6b6925dde91c824c5f59f

  • SSDEEP

    24576:DdFWbnWkzH93itGShAbMKz6sxt9Rv01O0x:hFWdH9UGSS4Kzxxt9Rte

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • dbd59181b4ba99f0eeb65c97fa199bc2_JaffaCakes118
    .rar
  • ItemsID.ini
  • Options.ini
  • PacketsT1.ini
  • SkillsID.ini
  • changelog.txt
  • classid.ini
  • inject.dll
    .dll windows:4 windows x86 arch:x86

    c73774008d8939a8922d8d7888d79e02


    Headers

    Imports

    Exports

    Sections

  • l2pbx.exe
    .exe windows:4 windows x86 arch:x86

    3b4544e50e326543e73bcc4971bb5fd6


    Headers

    Imports

    Sections

  • logs/l2phx.log
  • npcsid.ini
  • packetsc4.ini
  • packetsc5.ini
  • packetst0.ini
  • plugins/plugin_demo.dll
    .dll windows:4 windows x86 arch:x86

    e5179e1e6daec9cc33a9086579f76665


    Headers

    Imports

    Exports

    Sections

  • plugins/plugin_demo2.dll
    .dll windows:4 windows x86 arch:x86

    a04300bedb3c440d3a6a714f076eb82d


    Headers

    Imports

    Exports

    Sections

  • scripts/getVars.txt
  • scripts/myScript.txt
  • sysmsgid.ini