General

  • Target

    6ee08a4049666b72202aae2bc672ee8c_JaffaCakes118

  • Size

    330KB

  • MD5

    6ee08a4049666b72202aae2bc672ee8c

  • SHA1

    1074ca60a559f97f5ff6f4ab0af6ba25451b8eaa

  • SHA256

    608b979dfeb1d4dc71ad95f6da7dee72e0471db70404de6f6a94abd82cb90a1b

  • SHA512

    c548ef56a32039dd1b4dc92ca92b8c33d460688e2c1c179dd8852a308ed50df24cb5f0cd570beefc424353fb17d40fb3634da78f4febca0b6a4d19d564afacf4

  • SSDEEP

    6144:YLuTijMu9LtrPURo4PHgkt4uD5o+6vKqGHmQYcGPKKfZ6ztHn8GHfEFxu9J72lRv:ziwCLtr8Akt4ulUvZGHmv6GkzmGHfOmQ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 6ee08a4049666b72202aae2bc672ee8c_JaffaCakes118
    .rar
  • Usp10.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • 小林子游戏网.url
  • 简单按键.exe
    .exe windows:4 windows x86 arch:x86

    3d3d967282b1619854edf6348ebd96b7


    Headers

    Imports

    Sections

  • 简单按键配合无限加速使用的方法.txt