General

  • Target

    10bd5b2e732443b3765d241f238eeaad_JaffaCakes118

  • Size

    17.0MB

  • MD5

    10bd5b2e732443b3765d241f238eeaad

  • SHA1

    528d7d3bbf7ade68884692b681429688686f37a6

  • SHA256

    9a0308c973566e993e4755d9607bc83653a1af460f4d78e63bf0a72bb63045d2

  • SHA512

    6b216db85c888f96d30999efdf716952e4c2b901650844958a8dbcef260c34eca5c76929bcc66864a5c69939c019a8028f071a2bf0905889f006322dc87cd79b

  • SSDEEP

    393216:6/7C4RIzVcE4bryOu6qfHY7ZQOEy4tdJdyX6HR6Tje2odR:6TaVhOu4FTE/dJd16PoL

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 10bd5b2e732443b3765d241f238eeaad_JaffaCakes118
    .rar
  • metin2/HsUserUtil.log
  • metin2/hshield/3N.mhe
  • metin2/hshield/AhnRpt.exe
    .exe windows:4 windows x86 arch:x86

    15a0f1d644e443ffc57a495d97f7c764


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/AhnRpt.exe
    .exe windows:4 windows x86 arch:x86

    03fe80609d1a7c29b8f9df5b5311d931


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Cabinet.dll
    .dll windows:5 windows x86 arch:x86

    ea4cbf3c305bfb43c7e36a485e58acb4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PackAPI.dll
    .dll windows:4 windows x86 arch:x86

    2ea39580745c084c385726a21944661d


    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/BldInfo.ini
  • metin2/hshield/EHSvc.dll
    .dll windows:4 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/HSUpChk.log
  • metin2/hshield/HShield.dat
  • metin2/hshield/HsLogMgr.exe
    .exe .js windows:4 windows x86 arch:x86 polyglot

    0294ac99b287a173e802bd320b8a353a


    Code Sign

    Headers

    Imports

    Sections

  • metin2/hshield/Update/ahn.ui
  • metin2/hshield/Update/ahni2.dll
    .dll windows:4 windows x86 arch:x86

    32bc74863ee54d3573b4662f7e0ff09e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/Update/ahnupctl.dll
    .dll windows:4 windows x86 arch:x86

    0aa2ae188aec8c192d9ba9f57bc1f677


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/Update/autoup.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • metin2/hshield/Update/patch/39/ahn.ui
  • metin2/hshield/Update/patch/39/hs_common/ahnrpt.in-
    .bz2
  • ahnrpt.in-
  • metin2/hshield/Update/patch/39/hs_common/bldinfo.in-
    .bz2
  • bldinfo.in-
  • metin2/hshield/Update/patch/39/hs_dflt_nt/ehsvc.dl-
    .bz2
  • ehsvc.dl-
    .dll windows:4 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/Update/patch/39/hs_dflt_nt/hshield.da-
    .bz2
  • hshield.da-
  • metin2/hshield/Update/patch/39/hs_nt/ahnrpt.ex-
    .bz2
  • ahnrpt.ex-
    .exe windows:4 windows x86 arch:x86

    15a0f1d644e443ffc57a495d97f7c764


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/AhnRpt.exe
    .exe windows:4 windows x86 arch:x86

    03fe80609d1a7c29b8f9df5b5311d931


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Cabinet.dll
    .dll windows:5 windows x86 arch:x86

    ea4cbf3c305bfb43c7e36a485e58acb4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PackAPI.dll
    .dll windows:4 windows x86 arch:x86

    2ea39580745c084c385726a21944661d


    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/Update/patch/39/hs_nt/hslogmgr.ex-
    .bz2
  • metin2/hshield/Update/patch/39/update/ahnupctl.dl-
    .bz2
  • metin2/hshield/Update/patch/39/update/ahnupgs.dl-
    .bz2
  • metin2/hshield/Update/patch/39/update/hsinst.dl-
    .bz2
  • metin2/hshield/Update/patch/39/update/hsupdate.ex-
    .bz2
  • metin2/hshield/Update/patch/39/update/v3hunt.dl-
    .bz2
  • metin2/hshield/Update/patch/39/update/v3inetgs.dl-
    .bz2
  • metin2/hshield/Update/supdate.log
  • metin2/hshield/Update/user.dat
  • metin2/hshield/Update/v3bz32.dll
    .dll windows:4 windows x86 arch:x86

    18a7e7e93efbc40f1a84deb884e477f7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/Update/win/e/b/b_echo_sl/asc_com.dl-
    .bz2
  • metin2/hshield/Update/win/e/b/b_echo_sl/asc_dh.dl-
    .bz2
  • metin2/hshield/Update/win/e/b/b_echo_sl/asc_fse.dl-
    .bz2
  • metin2/hshield/Update/win/e/b/b_echo_sl/asc_intg.dl-
    .bz2
  • metin2/hshield/Update/win/e/b/b_echo_sl/asc_mmgr.dl-
    .bz2
  • metin2/hshield/Update/win/e/b/b_echo_sl/asc_unp.dl-
    .bz2
  • metin2/hshield/Update/win/e/b/b_echo_sl/fse_base.dl-
    .bz2
  • metin2/hshield/Update/win/e/b/b_echo_sl/fse_fact.dl-
    .bz2
  • metin2/hshield/Update/win/e/b/b_echo_sl/fse_pe.dl-
    .bz2
  • metin2/hshield/Update/win/e/b/b_echo_sl/gfs_base.dl-
    .bz2
  • metin2/hshield/Update/win/e/b/b_echo_sl/gfs_fact.dl-
    .bz2
  • metin2/hshield/Update/win/e/b/b_echo_sl/gfs_file.dl-
    .bz2
  • metin2/hshield/Update/win/e/b/b_echo_sl/gfs_mem.dl-
    .bz2
  • metin2/hshield/Update/win/e/b/b_echo_sl/gfs_os.dl-
    .bz2
  • metin2/hshield/Update/win/e/b/b_echo_sl/gfs_proc.dl-
    .bz2
  • metin2/hshield/Update/win/e/b/b_echo_sl/gfs_util.dl-
    .bz2
  • metin2/hshield/Update/win/e/b/b_sign_hs/0asc.sc-
    .bz2
  • metin2/hshield/Update/win/e/b/b_sign_hs/0sccure.sc-
    .bz2
  • metin2/hshield/Update/win/e/b/b_sign_hs/0sgame.sc-
    .bz2
  • metin2/hshield/Update/win/e/b/b_sign_hs/0spe3f.sc-
    .bz2
  • metin2/hshield/Update/win/e/b/b_sign_hs/moduler.sc-
    .bz2
  • metin2/hshield/Update/win/e/b/b_sign_hs/option.sc-
    .bz2
  • metin2/hshield/Update/win/e/b/v3_echo_hs/v3pro32s.dl-
    .bz2
  • metin2/hshield/Update/win/e/hs_heuristic/3n.mh-
    .bz2
  • metin2/hshield/ahnrpt.ini
  • metin2/hshield/ahnupctl.dll
    .dll windows:4 windows x86 arch:x86

    0aa2ae188aec8c192d9ba9f57bc1f677


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/ahnupgs.dll
    .dll windows:4 windows x86 arch:x86

    8b716d740b68bca833d4fbfa86889fd0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/0asc.scd
  • metin2/hshield/asc/0sccure.scd
  • metin2/hshield/asc/0sgame.scd
  • metin2/hshield/asc/0spe3f.scd
  • metin2/hshield/asc/asc_com.dll
    .dll windows:4 windows x86 arch:x86

    f78c8b1699433b545368201a890e8f57


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/asc_dh.dll
    .dll windows:4 windows x86 arch:x86

    cb5d8e6d5cb075eeb8e5838726699142


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/asc_fse.dll
    .dll windows:4 windows x86 arch:x86

    cb5d8e6d5cb075eeb8e5838726699142


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/asc_intg.dll
    .dll windows:4 windows x86 arch:x86

    b5e0f5b4411a147e546ecdf14970f820


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/asc_mmgr.dll
    .dll windows:4 windows x86 arch:x86

    a1b8f0ae05a5a4bfbf206fb6898f7a7b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/asc_unp.dll
    .dll windows:4 windows x86 arch:x86

    cb5d8e6d5cb075eeb8e5838726699142


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/fse_base.dll
    .dll windows:4 windows x86 arch:x86

    cb5d8e6d5cb075eeb8e5838726699142


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/fse_fact.dll
    .dll windows:4 windows x86 arch:x86

    cb5d8e6d5cb075eeb8e5838726699142


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/fse_pe.dll
    .dll windows:4 windows x86 arch:x86

    cb5d8e6d5cb075eeb8e5838726699142


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/gfs_base.dll
    .dll windows:4 windows x86 arch:x86

    cb5d8e6d5cb075eeb8e5838726699142


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/gfs_fact.dll
    .dll windows:4 windows x86 arch:x86

    cb5d8e6d5cb075eeb8e5838726699142


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/gfs_file.dll
    .dll windows:4 windows x86 arch:x86

    cb5d8e6d5cb075eeb8e5838726699142


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/gfs_mem.dll
    .dll windows:4 windows x86 arch:x86

    cb5d8e6d5cb075eeb8e5838726699142


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/gfs_os.dll
    .dll windows:4 windows x86 arch:x86

    dbbb50b7b721edff6799c133c95c2e3b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/gfs_proc.dll
    .dll windows:4 windows x86 arch:x86

    d68e5b4a4692f3ff26bef4b34e9364b3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/gfs_util.dll
    .dll windows:4 windows x86 arch:x86

    cb5d8e6d5cb075eeb8e5838726699142


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/asc/moduler.scd
  • metin2/hshield/asc/option.scd
  • metin2/hshield/hshield.log
  • metin2/hshield/hsinst.dll
    .dll windows:4 windows x86 arch:x86

    85f0a53320c617af19fda0768e3dfbbf


    Code Sign

    Headers

    Imports

    Sections

  • metin2/hshield/hsupdate.env
  • metin2/hshield/hsupdate.exe
    .exe .ps1 windows:4 windows x86 arch:x86 polyglot

    6191b1a775e14145b62819d639c2d9fb


    Code Sign

    Headers

    Imports

    Sections

  • metin2/hshield/psapi.dll
    .dll windows:5 windows x86 arch:x86

    a06529690d58edd08ef4703a44d5e7db


    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/supdate.log
  • metin2/hshield/v3hunt.dll
    .dll windows:4 windows x86 arch:x86

    33816193d1de5a2fde0735bc571df41a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/v3inetgs.dll
    .dll windows:4 windows x86 arch:x86

    832be30bf9c941826763ff0640d5f430


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/hshield/v3pro32s.dll
    .dll windows:4 windows x86 arch:x86

    f6212c14d2f4bf17609a97c72a08d24f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • metin2/metin2client.bin
    .exe windows:5 windows x86 arch:x86

    dacc99d178f07e1e79a5c1fb22c50bf4


    Headers

    Imports

    Sections

  • metin2/pack/root.eix
  • metin2/pack/root.epk