General

  • Target

    2b47b321bd102044cf116065ed3d7fc1_JaffaCakes118

  • Size

    7.4MB

  • MD5

    2b47b321bd102044cf116065ed3d7fc1

  • SHA1

    23f787bb4cba0a284c68d5f4dba8adfa83769269

  • SHA256

    15d2b6e4390d95c9b79e315c24ba1c78fb3e0aa371f70d97aa7590af0fb59353

  • SHA512

    2cc06e974501dab5ace99118f695d47caa6c0b657800c760970394f59508abc209fb2dbc7da1772d76adfd832ef48ba31c32b57bfba341f76aa1ff163e8f2ae9

  • SSDEEP

    196608:C9IuOLzXmdLiWRzDnhSch0z5I3Y+qOuW356HHjdNugZagkUHEN31dkW:kIuSz9iz9SciKzq3njdL8oExR

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b47b321bd102044cf116065ed3d7fc1_JaffaCakes118
    .rar
  • myAC1.6.2.4PRO/Client/acdev.sys
    .dll windows:4 windows x86 arch:x86

    4765c2be75cfdf951edcb18cbb6f350f


    Headers

    Imports

    Sections

  • myAC1.6.2.4PRO/Client/config.ini
  • myAC1.6.2.4PRO/Client/help_x64.txt
  • myAC1.6.2.4PRO/Client/myAC.ex
    .exe windows:4 windows x86 arch:x86

    368e3e49caa60c6ee064142ef7f4f5b0


    Headers

    Imports

    Exports

    Sections

  • myAC1.6.2.4PRO/Client/myAC.exe
    .exe windows:4 windows x86 arch:x86

    42a187fffb91fc9f0cd53926cc6e89c3


    Headers

    Imports

    Sections

  • myAC1.6.2.4PRO/GetMD5/GetMD5.cmd
  • myAC1.6.2.4PRO/GetMD5/GetMD5.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • myAC1.6.2.4PRO/GetMD5/ch_list.txt
  • myAC1.6.2.4PRO/PhpBanList_from_DB/index.php
  • myAC1.6.2.4PRO/PhpBanList_from_DB/myac.sql
  • myAC1.6.2.4PRO/SQLBan/SqlBan_src.zip
    .zip
  • libsql/ASyncDB.pas
  • libsql/ModifiedArtisticLicense.txt
  • libsql/about.txt
  • libsql/changes.txt
    .vbs
  • libsql/install.txt
  • libsql/jansql/changes.txt
  • libsql/jansql/credits.txt
  • libsql/jansql/janSQL.GID
  • libsql/jansql/janSQL.cnt
  • libsql/jansql/janSQL.dcu
  • libsql/jansql/janSQL.hlp
  • libsql/jansql/janSQL.pas
  • libsql/jansql/janSQLExpression2.dcu
  • libsql/jansql/janSQLExpression2.pas
  • libsql/jansql/janSQLTokenizer.dcu
  • libsql/jansql/janSQLTokenizer.pas
  • libsql/jansql/janSQLstrings.dcu
  • libsql/jansql/janSQLstrings.pas
  • libsql/jansql/jansql_LICENSE.TXT
  • libsql/jansql/jansql_samples.txt
  • libsql/jansql/mwStringHashList.dcu
  • libsql/jansql/mwStringHashList.pas
    .js
  • libsql/libmysql.pas
    .js
  • libsql/libodbc32.pas
    .js
  • libsql/libpgsql.pas
  • libsql/libsql.pas
  • libsql/libsql.res
  • libsql/libsql_d5.res
  • libsql/libsql_d7.res
  • libsql/libsqlite.pas
    .js
  • libsql/libsqlite3.pas
    .js
  • libsql/libsqlversion.inc
  • libsql/lsdatasetbase.pas
  • libsql/lsdatasetquery.pas
  • libsql/lsdatasettable.pas
  • libsql/pasjansql.pas
    .js
  • libsql/pasmysql.pas
    .js
  • libsql/pasodbc.pas
    .js
  • libsql/passql.pas
    .js
  • libsql/passqlite.pas
    .js
  • libsql/pasthreadedsqlite.pas
  • libsql/readme.txt
  • libsql/sqlcomp_nodataset.pas
  • libsql/sqlcomponents.pas
  • libsql/sqlsupport.pas
  • libsql/staticsqlite3.pas
  • libsql/utf8util.pas
  • libsql/vclsql.pas
    .js
  • src/ProjectGroup1.bpg
  • src/TestACDB.cfg
  • src/TestACDB.dpr
  • src/TestACDB.res
  • src/UnitACDB.dfm
  • src/UnitACDB.pas
    .js
  • src/myacbans.cfg
  • src/myacbans.dpr
  • src/myacbans.ini
  • src/myacbans.res
  • myAC1.6.2.4PRO/SQLBan/amxbans/amx_banhistory.sql
  • myAC1.6.2.4PRO/SQLBan/amxbans/amx_bans.sql
  • myAC1.6.2.4PRO/SQLBan/amxbans/plugin.zip
    .zip
  • plugin/amxmodx/configs/amxbans.cfg
  • plugin/amxmodx/data/lang/amxbans.txt
  • plugin/amxmodx/scripting/admin_amxbans.sma
  • plugin/amxmodx/scripting/amxbans.sma
  • plugin/amxmodx/scripting/amxbans/check_player.inl
  • plugin/amxmodx/scripting/amxbans/cmdBan.inl
  • plugin/amxmodx/scripting/amxbans/cmdUnban.inl
  • plugin/amxmodx/scripting/amxbans/global_vars.inl
  • plugin/amxmodx/scripting/amxbans/init_functions.inl
  • plugin/amxmodx/scripting/amxbans/menu.inl
  • plugin/amxmodx/scripting/amxbans/search.inl
  • myAC1.6.2.4PRO/SQLBan/amxbans/web_new.zip
    .zip
  • web_new/admin/add_ban.php
  • web_new/admin/edit_ban.php
  • web_new/admin/edit_ban_ex.php
  • web_new/ban_details.php
  • web_new/ban_list.php
  • web_new/ban_search.php
  • web_new/templates/add_ban.tpl
  • web_new/templates/ban_details.tpl
  • web_new/templates/ban_search.tpl
  • web_new/templates/edit_ban.tpl
  • web_new/templates/edit_ban_ex.tpl
  • myAC1.6.2.4PRO/SQLBan/mssql.sql
  • myAC1.6.2.4PRO/SQLBan/myacbans.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • myAC1.6.2.4PRO/SQLBan/myacbans.ini
  • myAC1.6.2.4PRO/SQLBan/mysql.sql
  • myAC1.6.2.4PRO/SQLBan/readme.txt
  • myAC1.6.2.4PRO/Server/adm_msg.txt
  • myAC1.6.2.4PRO/Server/config.ini
  • myAC1.6.2.4PRO/Server/config_pro.ini
  • myAC1.6.2.4PRO/Server/configs/banslist.txt
  • myAC1.6.2.4PRO/Server/configs/cdb.dat
  • myAC1.6.2.4PRO/Server/configs/cheats2.dat
    .eml
  • myAC1.6.2.4PRO/Server/configs/cheatslist.txt
  • myAC1.6.2.4PRO/Server/configs/for_HL2.zip
    .zip
  • for_HL2/cdb.dat
  • for_HL2/cheatslist.txt
  • myAC1.6.2.4PRO/Server/configs/gamefiles.txt
  • myAC1.6.2.4PRO/Server/configs/hl2data.dat
  • myAC1.6.2.4PRO/Server/logfile_help.txt
  • myAC1.6.2.4PRO/Server/myACserv.exe
    .exe windows:4 windows x86 arch:x86

    63a887f12cabcdcc7e136c032719ad4b


    Headers

    Imports

    Sections

  • myAC1.6.2.4PRO/Server/registration.txt
  • myAC1.6.2.4PRO/Server/rus_xp.reg
  • myAC1.6.2.4PRO/Server/www.myac.msk.ru.url
  • myAC1.6.2.4PRO/ServerConsole/info.txt
  • myAC1.6.2.4PRO/ServerConsole/myACsrv.exe
    .exe windows:4 windows x86 arch:x86

    bac2910d0ea7bb3c7736d7f58e1e352f


    Headers

    Imports

    Sections

  • myAC1.6.2.4PRO/ServerNG/config.ini
  • myAC1.6.2.4PRO/ServerNG/info.txt
  • myAC1.6.2.4PRO/ServerNG/myACsrvNG.exe
    .exe windows:4 windows x86 arch:x86

    f158ec9cecd0aaf6e6cfd884144da2ea


    Headers

    Imports

    Sections

  • myAC1.6.2.4PRO/UpdServ/UpdServ.exe
    .exe windows:4 windows x86 arch:x86

    b6cce7cf405be2a7b4b32ec4cb77777a


    Headers

    Imports

    Sections

  • myAC1.6.2.4PRO/UpdServ/UpdServNG.exe
    .exe windows:4 windows x86 arch:x86

    66d9432e0a1b5e36228593c994b0bda0


    Headers

    Imports

    Sections

  • myAC1.6.2.4PRO/UpdServ/logs/upds_20110314.log
  • myAC1.6.2.4PRO/UpdServ/readme.txt
  • myAC1.6.2.4PRO/amxx/HL1/by_CLLlAgOB/new/Dedicated-Server_RU - myAC Plugin.htm
    .html
  • myAC1.6.2.4PRO/amxx/HL1/by_CLLlAgOB/new/myac_shadow_v4.6.rar
    .rar
  • configs/myac.cfg
  • configs/whitelist.txt
  • data/helpmyac.txt
  • models/pingvin.mdl
  • myachelp.sma
  • plugins/myachelp.amxx
  • myAC1.6.2.4PRO/amxx/HL1/by_CLLlAgOB/new/myac_shadow_v4.7.rar
    .rar
  • myac/configs/myac.cfg
  • myac/configs/whitelist.txt
  • myac/data/helpmyac.txt
  • myac/models/pingvin.mdl
  • myac/myachelp.sma
  • myac/plugins/myachelp.amxx
  • myAC1.6.2.4PRO/amxx/HL1/by_CLLlAgOB/new/myac_shadow_v4.7_no_model.rar
    .rar
  • myac no model/configs/myac.cfg
  • myac no model/configs/whitelist.txt
  • myac no model/data/helpmyac.txt
  • myac no model/myachelp.sma
  • myac no model/plugins/myachelp.amxx
  • myAC1.6.2.4PRO/amxx/HL1/by_CLLlAgOB/old/amxmodx.rar
    .rar
  • myAC1.6.2.4PRO/amxx/HL1/by_CLLlAgOB/old/readme.txt
  • myAC1.6.2.4PRO/amxx/HL1/standart/compile_myac.sh
    .sh linux
  • myAC1.6.2.4PRO/amxx/HL1/standart/myac.amxx
  • myAC1.6.2.4PRO/amxx/HL1/standart/myac.sma
  • myAC1.6.2.4PRO/amxx/HL1/standart/whitelist.txt
  • myAC1.6.2.4PRO/amxx/HL2/by_CLLlAgOB/about.txt
  • myAC1.6.2.4PRO/amxx/HL2/by_CLLlAgOB/myac_tem_lock.rar
    .rar
  • myAC1.6.2.4PRO/amxx/HL2/by_name/about.txt
  • myAC1.6.2.4PRO/amxx/HL2/by_name/sm_myac.zip
    .zip
  • myAC1.6.2.4PRO/changes.txt
  • myAC1.6.2.4PRO/faq_myac.html
  • myAC1.6.2.4PRO/help_x64.txt
  • myAC1.6.2.4PRO/inno_setup/myac_setup.iss
  • myAC1.6.2.4PRO/inno_setup/readme.txt
  • myAC1.6.2.4PRO/readme.txt