Overview

overview

7

Static

static

7

xhbxlhyfx/...EL.dll

windows7-x64

7

xhbxlhyfx/...EL.dll

windows10-2004-x64

7

xhbxlhyfx/...��.exe

windows7-x64

7

xhbxlhyfx/...��.exe

windows10-2004-x64

7

xhbxlhyfx/...԰.url

windows7-x64

1

xhbxlhyfx/...԰.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5d614425a9d3bf864f1dd4960b3ce874_JaffaCakes118

  • Size

    1.2MB

  • MD5

    5d614425a9d3bf864f1dd4960b3ce874

  • SHA1

    b01679696bc1647d82f7052798e3673ecf6ebd96

  • SHA256

    ff6c09658c3699e6e7c334a100507ea5bd899fda89dce8e8899a304d36c98d60

  • SHA512

    e3cd745ef2ec3b2dd8048f62cbdb3084390e72df90f18e42296243a237bcde4a09071cb96b6fd96bbe5d7633914d1d527e49e036bb9721c6b727cc40b9e7c807

  • SSDEEP

    24576:v+E7vbSch7FLXvOJy1GjAfDdtbp9EH/w/4XToM:J7TSch7lvDgSDdzS/QnM

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5d614425a9d3bf864f1dd4960b3ce874_JaffaCakes118
    .zip
  • xhbxlhyfx/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • xhbxlhyfx/СѸ׻Ա˺ŷȡ.exe
    .exe windows:4 windows x86 arch:x86

    1101322a3035d045a88d0664111a09bf


    Headers

    Imports

    Sections

  • xhbxlhyfx/԰.txt
  • xhbxlhyfx/԰.url