Overview

overview

3

Static

static

3

Evoconn3/G...a49.js

windows7-x64

3

Evoconn3/G...a49.js

windows10-2004-x64

3

Evoconn3/I...er.dll

windows7-x64

3

Evoconn3/I...er.dll

windows10-2004-x64

3

Evoconn3/MDX.dll

windows7-x64

3

Evoconn3/MDX.dll

windows10-2004-x64

3

Evoconn3/OC-Pro.js

windows7-x64

3

Evoconn3/OC-Pro.js

windows10-2004-x64

3

Evoconn3/S...log.js

windows7-x64

3

Evoconn3/S...log.js

windows10-2004-x64

3

Evoconn3/S...er.dll

windows7-x64

3

Evoconn3/S...er.dll

windows10-2004-x64

3

Evoconn3/S...DX.dll

windows7-x64

3

Evoconn3/S...DX.dll

windows10-2004-x64

3

Evoconn3/S...ns2.js

windows7-x64

3

Evoconn3/S...ns2.js

windows10-2004-x64

3

Evoconn3/S...eme.js

windows7-x64

3

Evoconn3/S...eme.js

windows10-2004-x64

3

Evoconn3/S...ise.js

windows7-x64

3

Evoconn3/S...ise.js

windows10-2004-x64

3

Evoconn3/S...ick.js

windows7-x64

3

Evoconn3/S...ick.js

windows10-2004-x64

3

Evoconn3/S...ker.js

windows7-x64

3

Evoconn3/S...ker.js

windows10-2004-x64

3

Evoconn3/S...rs.dll

windows7-x64

3

Evoconn3/S...rs.dll

windows10-2004-x64

3

Evoconn3/S...mp3.js

windows7-x64

3

Evoconn3/S...mp3.js

windows10-2004-x64

3

Evoconn3/S...ed.vbs

windows7-x64

1

Evoconn3/S...ed.vbs

windows10-2004-x64

1

Evoconn3/S...ps.dll

windows7-x64

3

Evoconn3/S...ps.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2bfaf024ef6405d364d7697439e139e7_JaffaCakes118

  • Size

    2.3MB

  • MD5

    2bfaf024ef6405d364d7697439e139e7

  • SHA1

    fda90ea23d3a2aa380b8fce4f0aea330d29a55de

  • SHA256

    2ef36a8f4492b0d87e3b687c46b5709702cc99d108dd312a87ae508d4532fa0c

  • SHA512

    7520726ecadc8b55de52126160e59ff99e13804fe48f8f8c5ff4d50f9dfd33b70bb4dffd79274fea06c7a0f19b914824cd47638e5537204da4b1096110372744

  • SSDEEP

    49152:AiCndfXg2Ghrd9+mR3bGv+hdsaCkcmAZwcy4zfcB8R6vfXg2+KPe6m/I:A/chpL3dhbCk5AZwcy4jl6v/YKPe6mQ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • 2bfaf024ef6405d364d7697439e139e7_JaffaCakes118
    .rar
  • Evoconn3/Games/BonusQuestions.txt
  • Evoconn3/Games/SuperTrivia49.mrc
    .js
  • Evoconn3/Games/SuperTrivia49EN.mrc
  • Evoconn3/Games/SuperTrivia49NL.mrc
  • Evoconn3/Games/questions.txt
  • Evoconn3/ID3Changer.dll
    .dll windows:1 windows x86 arch:x86

    5a498eee87e4d89512a84502f500181f


    Headers

    Imports

    Exports

    Sections

  • Evoconn3/MDX.DLL
    .dll windows:4 windows x86 arch:x86

    34b86dab5c0b41a24220fe3732aef3a1


    Headers

    Imports

    Exports

    Sections

  • Evoconn3/Msn.ico
  • Evoconn3/Numeric.hlp
  • Evoconn3/OC-Pro readme.txt
  • Evoconn3/OC-Pro.ini
  • Evoconn3/OC-Pro.mrc
    .js
  • Evoconn3/Pictures/AmyLeeT10.jpg
    .jpg
  • Evoconn3/Pictures/AmyLeeT9.jpg
    .jpg
  • Evoconn3/Pictures/Evanescence Wallpaper.jpg
    .jpg
  • Evoconn3/Pictures/Grey Steel 6.03.bmp
  • Evoconn3/Pictures/Grey Steel 6.1.bmp
  • Evoconn3/Pictures/Grey Steel Blank 6.03.bmp
  • Evoconn3/Pictures/Grey Steel Blank 6.1.bmp
  • Evoconn3/Pictures/Msn.ico
  • Evoconn3/Pictures/Thumbs.db
  • Evoconn3/Pictures/auh.JPG
    .jpg
  • Evoconn3/Pictures/buttons.bmp
  • Evoconn3/Pictures/evanescence.jpg
    .jpg
  • Evoconn3/Pictures/fp.bmp
  • Evoconn3/Pictures/ghv8.JPG
    .jpg
  • Evoconn3/Pictures/gold.bmp
  • Evoconn3/Pictures/grass.bmp
  • Evoconn3/Pictures/logoo.PNG
    .png
  • Evoconn3/Pictures/mp.bmp
  • Evoconn3/Pictures/np.bmp
  • Evoconn3/Pictures/pfp.bmp
  • Evoconn3/Pictures/pmp.bmp
  • Evoconn3/Pictures/prp.bmp
  • Evoconn3/Pictures/rp.bmp
  • Evoconn3/Pictures/test.PNG
    .png
  • Evoconn3/Pictures/wood.bmp
  • Evoconn3/Scripts/AwayRemote.mrc
  • Evoconn3/Scripts/Bigdialog.mrc
    .js
  • Evoconn3/Scripts/Eventlogs.mrc
  • Evoconn3/Scripts/ID3Changer.dll
    .dll windows:1 windows x86 arch:x86

    5a498eee87e4d89512a84502f500181f


    Headers

    Imports

    Exports

    Sections

  • Evoconn3/Scripts/JoinCounter.mrc
  • Evoconn3/Scripts/MDX.DLL
    .dll windows:4 windows x86 arch:x86

    34b86dab5c0b41a24220fe3732aef3a1


    Headers

    Imports

    Exports

    Sections

  • Evoconn3/Scripts/Protections1.mrc
  • Evoconn3/Scripts/Protections2.mrc
    .js
  • Evoconn3/Scripts/Scriptprotection.mrc
  • Evoconn3/Scripts/Theme.mrc
    .js
  • Evoconn3/Scripts/advertise
    .js
  • Evoconn3/Scripts/antiop.mrc
  • Evoconn3/Scripts/badnick.mrc
    .js
  • Evoconn3/Scripts/badwordkicker.mrc
    .js
  • Evoconn3/Scripts/bars.mdx
    .dll windows:4 windows x86 arch:x86

    99eee5c933b3e274b3f9aa164c57762c


    Headers

    Imports

    Exports

    Sections

  • Evoconn3/Scripts/bmp3.mrc
    .js
  • Evoconn3/Scripts/commandslist
  • Evoconn3/Scripts/emoprot.mrc
  • Evoconn3/Scripts/joincount.mrc
  • Evoconn3/Scripts/kickcount
  • Evoconn3/Scripts/laatstgejoined.mrc
    .vbs
  • Evoconn3/Scripts/linkkick.mrc
  • Evoconn3/Scripts/logs record.mrc
  • Evoconn3/Scripts/menubarop.mrc
  • Evoconn3/Scripts/mp3.ico
  • Evoconn3/Scripts/onjoincheck.mrc
  • Evoconn3/Scripts/onstart.mrc
  • Evoconn3/Scripts/playitcommands.mrc
  • Evoconn3/Scripts/popups.dll
    .dll windows:4 windows x86 arch:x86

    3a10814cb4c1ecb8f052f0ca2be9a655


    Headers

    Imports

    Exports

    Sections

  • Evoconn3/Scripts/takejoin.mrc
  • Evoconn3/Scripts/takeongold.mrc
  • Evoconn3/Scripts/views.mdx
    .dll windows:4 windows x86 arch:x86

    07056cc36c129798d605c78512f748e3


    Headers

    Imports

    Exports

    Sections

  • Evoconn3/Scripts/welcomestart.mrc
  • Evoconn3/Scripts/welkomstgroet.mrc
  • Evoconn3/Uninstal.exe
    .exe windows:4 windows x86 arch:x86

    a5e271e034cb008d607c9730dced824a


    Headers

    Imports

    Sections

  • Evoconn3/aliases.ini
  • Evoconn3/allowed.txt
  • Evoconn3/bars.mdx
    .dll windows:4 windows x86 arch:x86

    99eee5c933b3e274b3f9aa164c57762c


    Headers

    Imports

    Exports

    Sections

  • Evoconn3/bmp3.txt
  • Evoconn3/commandsadmin.txt
  • Evoconn3/commandsfriends.txt
  • Evoconn3/commandshost.txt
  • Evoconn3/helpme.TXT
  • Evoconn3/ircintro.hlp
  • Evoconn3/jcreport.txt
  • Evoconn3/logs/@20_Jaar_en_Ouder.20090815.log
  • Evoconn3/mIRC.exe
    .exe windows:4 windows x86 arch:x86

    2ce2d224afe3bb87cd164a31b4377ebd


    Headers

    Imports

    Sections

  • Evoconn3/mirc.GID
  • Evoconn3/mirc.hlp
  • Evoconn3/mirc.ini
  • Evoconn3/mircfaq.hlp
  • Evoconn3/mp3.ico
  • Evoconn3/nHTMLn_2.92.dll
    .dll windows:4 windows x86 arch:x86

    69f3875ae7b4d0c7b04ae076dd01174e


    Headers

    Imports

    Exports

    Sections

  • Evoconn3/popups.dll
    .dll windows:4 windows x86 arch:x86

    3a10814cb4c1ecb8f052f0ca2be9a655


    Headers

    Imports

    Exports

    Sections

  • Evoconn3/popups.ini
  • Evoconn3/registry.dll
    .dll windows:4 windows x86 arch:x86

    14bb0daa9669388de7bc68c5848a677a


    Headers

    Imports

    Exports

    Sections

  • Evoconn3/remote.ini
  • Evoconn3/servers.ini
  • Evoconn3/sounds/bye.wav
  • Evoconn3/sounds/callart.wav
  • Evoconn3/sounds/completed.wav
  • Evoconn3/sounds/hallo.wav
  • Evoconn3/sounds/negativeal.wav
  • Evoconn3/sounds/negativeax.wav
  • Evoconn3/urls.ini
  • Evoconn3/vars.ini
  • Evoconn3/versions.txt
  • Evoconn3/vfcache.dat
  • Evoconn3/views.mdx
    .dll windows:4 windows x86 arch:x86

    07056cc36c129798d605c78512f748e3


    Headers

    Imports

    Exports

    Sections