Overview

overview

7

Static

static

7

paper/Rpaper.chm

windows7-x64

1

paper/Rpaper.chm

windows10-2004-x64

1

paper/appface.dll

windows7-x64

7

paper/appface.dll

windows10-2004-x64

7

paper/data.dll

windows7-x64

7

paper/data.dll

windows10-2004-x64

7

paper/datasys.dll

windows7-x64

1

paper/datasys.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3719697fe28f0dfb147bfaac6d61b376_JaffaCakes118

  • Size

    1.7MB

  • MD5

    3719697fe28f0dfb147bfaac6d61b376

  • SHA1

    8a0c4bd62444ecdd730730d8bf97f27e4542a108

  • SHA256

    57c3fa6ed0b9ea42f5de963dd38ea24fbbd248c584a8220b0632809852aee77c

  • SHA512

    248cb84d1aa26ce646c33ed8fdc98170feac50908cac1ef9b85c57570263512bac0eb54c57dd6690a32037be0866a8fbc6e64e4c580977a85690f8cf7f73f3d7

  • SSDEEP

    49152:rkEIG5sRekEIG5EAjKz/hegpZjQxgStALHS:r1J1SmawgLjfLHS

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 3719697fe28f0dfb147bfaac6d61b376_JaffaCakes118
    .rar
  • paper/Content.dll
    .jpg
  • paper/Rpape11r.bmp
  • paper/Rpaper.chm
    .chm
  • paper/appface.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • paper/data.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • paper/datasys.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • paper/icon.ico
  • paper/infoftv.dll
    .jpg
  • paper/irunin.bmp
  • paper/papersys.dll
    .jpg
  • paper/read.urf