General

  • Target

    JJSploit_8.8.2_x64-setup.exe

  • Size

    7.1MB

  • MD5

    d61fc449b5fc504ec50382551ea4ac01

  • SHA1

    b28d161900d95d0b88a12915b4c2d1be71be5b9b

  • SHA256

    7320b9713b06d2f8e591448b31f5ef8bb7e41ccfc87273056073ee2bcb694d7d

  • SHA512

    c65720aaa7801c1c95faa2c0e305e25aea18bf5b5f396b3854631000c250f9e6cb4063d6d30cb9a2be7c7e2ebe0e113f66c54d6aa54d1a915194da4662695ce6

  • SSDEEP

    196608:HyEQr1ykmou299X20O4mLB4oSezkAG+iX7e:Hy1oUumX20O4OnSSkAG+iX7e

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

Files

  • JJSploit_8.8.2_x64-setup.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    ed06d61f6957c32cd324837726a5a070


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll windows:6 windows x86 arch:x86

    17cb20871354b907f678c7c220e4ca60


    Headers

    Imports

    Exports

    Sections

  • db.json
  • libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • resources/luascripts/animations/dab.lua
  • resources/luascripts/animations/energizegui.lua
  • resources/luascripts/animations/jumpland.lua
  • resources/luascripts/animations/levitate.lua
  • resources/luascripts/animations/walkthrough.lua
  • resources/luascripts/beesim/autodig.lua
  • resources/luascripts/general/aimbot.lua
    .js
  • resources/luascripts/general/chattroll.lua
  • resources/luascripts/general/fly.lua
  • resources/luascripts/general/god.lua
  • resources/luascripts/general/infinitejump.lua
  • resources/luascripts/general/magnetizeto.lua
  • resources/luascripts/general/multidimensionalcharacter.lua
  • resources/luascripts/general/noclip.lua
    .js
  • resources/luascripts/general/teleportto.lua
  • resources/luascripts/general/tptool.lua
  • resources/luascripts/jailbreak/criminalesp.lua
  • resources/luascripts/jailbreak/policeesp.lua
  • resources/luascripts/jailbreak/removewalls.lua
  • resources/luascripts/jailbreak/walkspeed.lua
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll windows:6 windows x86 arch:x86

    17cb20871354b907f678c7c220e4ca60


    Headers

    Imports

    Exports

    Sections

  • wearedevs-net.exe
    .exe windows:6 windows x64 arch:x64

    ab0c95625d206852a7a3940ea43e0734


    Headers

    Imports

    Sections

  • xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections