Overview

overview

7

Static

static

7

w4rhook7/w...v7.dll

windows7-x64

7

w4rhook7/w...v7.dll

windows10-2004-x64

7

w4rhook7/w...v7.exe

windows7-x64

7

w4rhook7/w...v7.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ec21260ae4b3b8993854310956a81c14_JaffaCakes118

  • Size

    179KB

  • MD5

    ec21260ae4b3b8993854310956a81c14

  • SHA1

    b7fc71896afd5b90020298314a71604c528b876c

  • SHA256

    39ce1e129fdffc747eabc3c4dd1fbb8e6e78d25fbdecffcc3d1d090d94fabbee

  • SHA512

    69a1f1ba9c512d4c2c1a41d15dbd1bc3430939b54042d8272a89b37d4b01c3a28ec45b3b6dd398408f0bd288ecf3795c244d7a81b41164af9659e1e9ef46380c

  • SSDEEP

    3072:VKv2+lLyfa9S36p6pD0x53vEH+zREm25WZpluMQp/AFSjxl8/8wb0oRrbTvp618L:YRL0ac46pox53v6en25WZDur/rs/8hoX

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • ec21260ae4b3b8993854310956a81c14_JaffaCakes118
    .rar
  • w4rhook7/w4rhook7/-cRyStaL-oWnAge-.cfg
  • w4rhook7/w4rhook7/GoreInverse.cfg
  • w4rhook7/w4rhook7/ProdigyInverse.cfg
  • w4rhook7/w4rhook7/SplattInverse.cfg
  • w4rhook7/w4rhook7/afk.cfg
  • w4rhook7/w4rhook7/main.cfg
  • w4rhook7/w4rhook7/menu.txt
  • w4rhook7/w4rhook7/refresh.cfg
  • w4rhook7/w4rhook7/w4r hook v7.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • w4rhook7/w4rhook7/w4r hook v7.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections