General

  • Target

    2b1ce56281a19db90437c5cae64b58a5_JaffaCakes118

  • Size

    2.4MB

  • MD5

    2b1ce56281a19db90437c5cae64b58a5

  • SHA1

    6b95f8ab5532d7d8f7902500b784fc70aab26f1a

  • SHA256

    fde9faf609edf8a8bce2146216b3e7e78009e3cc801fa74ef13bec161255fee1

  • SHA512

    072806d253c92319b517450e1fb1fe64d90a9da3eb5eeff7698f16cecc94ddc74ec16a20e37efa61348c42a4d8746a0c61d63686e754dad452648fe4ea6a482b

  • SSDEEP

    49152:98oitLC6Ij4KXwmT9M+0rfrMJ5ywiG8OVClcvtZTL6BMxiG2PROCUgpK4j:iLdCrjXwohurGeG8OVClvY2zCW

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b1ce56281a19db90437c5cae64b58a5_JaffaCakes118
    .rar
  • SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 使用必读!.txt
  • 服务器软件.url
  • 脚本之家.url
  • 逆战逆鳞免费版X1.3.exe
    .exe windows:5 windows x86 arch:x86

    fcf2282e4869dcdc7c6369351c203e4a


    Headers

    Imports

    Exports

    Sections