Overview

overview

7

Static

static

7

elhacker.net.url

windows7-x64

6

elhacker.net.url

windows10-2004-x64

3

rpkeylogge...ok.dll

windows7-x64

7

rpkeylogge...ok.dll

windows10-2004-x64

7

rpkeylogge...er.exe

windows7-x64

7

rpkeylogge...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb1ca26ef5b7d775462f43dc2be2c6e3_JaffaCakes118

  • Size

    40KB

  • MD5

    fb1ca26ef5b7d775462f43dc2be2c6e3

  • SHA1

    eb6f6ea80bad9e5ee7027365474723e64ca78fef

  • SHA256

    dc7dc69d4ed0d65725d47e55415a29ce8794f120a0f19d1c4acebfe51cb002cb

  • SHA512

    00e8df9a524f53f859b544cc12939ebac0463dafffd8b1d4e667bfee65c78d904334abe9a0267f86bbff36ff2e6884a011b2ef88d64cf04a68c56985d55ff588

  • SSDEEP

    768:I83P1+VL5lQIl334KWGUUvxOkMPRfDXm8dnn6XYGxqw1xRODp8UzBZ6:I0OfLh4qvx4Xm8dnn4jxIFxj6

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • fb1ca26ef5b7d775462f43dc2be2c6e3_JaffaCakes118
    .zip
  • elhacker.net.url
  • rpkeylogger-0.1/bin/Hook.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • rpkeylogger-0.1/bin/rpkeylogger.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • rpkeylogger-0.1/readme.txt
  • rpkeylogger-0.1/src/RKeylog.def
  • rpkeylogger-0.1/src/hook.c
  • rpkeylogger-0.1/src/rpkeylogger.cpp
  • rpkeylogger-0.1/src/rpkeylogger.h