??0CRainbowDownloader_DLL@@QAE@XZ
??4CRainbowDownloader_DLL@@QAEAAV0@ABV0@@Z
?fnRainbowDownloader_DLL@@YAHXZ
?nRainbowDownloader_DLL@@3HA
General
-
Target
2e80525db423f223815a98370e5fa6e3_JaffaCakes118
-
Size
145KB
-
MD5
2e80525db423f223815a98370e5fa6e3
-
SHA1
d67f800f3de41869c238a00d82ceaaadec798929
-
SHA256
8bda5302f51b93c556d303dc39052c174202c3f57b58849410040d524944b87c
-
SHA512
38a80119b46e2a6379c6f28705fa85349b09371a53f5659a31fc6469e32a1e027107bdf1658d4b98158bfe40a7692a8464abdb9a7dc6e44b1e51e46f7d3f2167
-
SSDEEP
3072:nwRVxfNrZiz+n4c2Y+nKLev/y2s4gy/7vhtIebrCZG5l5q:nwRVxfNFiz+72Y+y4r7vfFbr0QlQ
Score
7/10
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
2e80525db423f223815a98370e5fa6e3_JaffaCakes118
Headers
Exports
Sections
-
out.upx
Headers
Sections