Overview

overview

7

Static

static

7

1740469837/Clear.bat

windows7-x64

1

1740469837/Clear.bat

windows10-2004-x64

1

1740469837...ar.bat

windows7-x64

1

1740469837...ar.bat

windows10-2004-x64

1

1740469837...bal.js

windows7-x64

3

1740469837...bal.js

windows10-2004-x64

3

1740469837/MD5.exe

windows7-x64

7

1740469837/MD5.exe

windows10-2004-x64

7

1740469837...ls.dll

windows7-x64

7

1740469837...ls.dll

windows10-2004-x64

7

1740469837...ls.exe

windows7-x64

7

1740469837...ls.exe

windows10-2004-x64

7

1740469837...bal.js

windows7-x64

3

1740469837...bal.js

windows10-2004-x64

3

1740469837...ll.exe

windows7-x64

1

1740469837...ll.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    08cf0580aa0e968a27e083586b24327d_JaffaCakes118

  • Size

    844KB

  • MD5

    08cf0580aa0e968a27e083586b24327d

  • SHA1

    705e5945ef2e04776442badfaed27cb30d9c4ee0

  • SHA256

    7504ac4fd83a355563cfc05ffe472065f9d33ed3661a7028c898fff4f83b1947

  • SHA512

    28accb57db1ca35e5dc9c3908358c804a23220f3cb6cf57d3c25eb171478b19ed0047e2ec198b695c2d2bee8a5b669cac184f606d5d14d0a796f3f331ce8e381

  • SSDEEP

    24576:sLW1JKObMM84zrlLr/mp4leZPOYXZYReYvMuWlF3c:ewJdAszrNi6gZPOYXZDLBn3c

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 08cf0580aa0e968a27e083586b24327d_JaffaCakes118
    .rar
  • 1740469837/Clear.bat
  • 1740469837/Config.ini
  • 1740469837/DLL/Clear.bat
  • 1740469837/DLL/Hook.pas
  • 1740469837/DLL/MXTools.cfg
  • 1740469837/DLL/MXTools.dof
  • 1740469837/DLL/MXTools.dpr
  • 1740469837/DLL/MXTools.res
  • 1740469837/DLL/PsGlobal.pas
    .js
  • 1740469837/DLL/Unit1.ddp
  • 1740469837/DLL/Unit1.dfm
  • 1740469837/DLL/Unit1.pas
  • 1740469837/ICO-1.ICO
  • 1740469837/MD5.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 1740469837/MXTools.cfg
  • 1740469837/MXTools.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 1740469837/MXTools.dof
  • 1740469837/MXTools.dpr
  • 1740469837/MXTools.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 1740469837/MXTools.res
  • 1740469837/PsGlobal.pas
    .js
  • 1740469837/UPXShell.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 1740469837/Unit1.ddp
  • 1740469837/Unit1.dfm
  • 1740469837/Unit1.pas
  • 1740469837/下载说明.htm
    .html .js polyglot