Overview

overview

7

Static

static

7

ra2gzxgqwm...EL.dll

windows7-x64

7

ra2gzxgqwm...EL.dll

windows10-2004-x64

7

ra2gzxgqwm...��.exe

windows7-x64

7

ra2gzxgqwm...��.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    78f7be0544db2ae281a50bf38415d8ed_JaffaCakes118

  • Size

    1.9MB

  • MD5

    78f7be0544db2ae281a50bf38415d8ed

  • SHA1

    79833e6e2932705dacf6b25d4a545bf52b0db69e

  • SHA256

    43d5c6b6074dfc8e63123dc96d44bfd7d4a45fe2c7b9b70a877da015b48d57ca

  • SHA512

    25d437f4e89630bf1d77a143314334ad708d189a6ce2024ad2797ad6c9bffe4e8115982af27f322cc2de0b08c997a3fdcdd980f8220853d2a7ba316c80aab826

  • SSDEEP

    49152:gieUTGTZpiOJZ+KJyVfj7jN6qfeclVI8huRYTu0w9:giZTKL+KJyV7jN6IflVXhGYTu0w9

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 78f7be0544db2ae281a50bf38415d8ed_JaffaCakes118
    .zip
  • ra2gzxgqwmb/Install.ini
  • ra2gzxgqwmb/Picture.pic
  • ra2gzxgqwmb/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ra2gzxgqwmb/skinh.she
  • ra2gzxgqwmb/红色警戒规则修改器.exe
    .exe windows:4 windows x86 arch:x86

    57594cc16eaabdb0d54b4c2df7ed9c5d


    Headers

    Imports

    Sections