Overview

overview

7

Static

static

7

Module/Flash.dll

windows7-x64

7

Module/Flash.dll

windows10-2004-x64

7

TOL_Client.exe

windows7-x64

7

TOL_Client.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    439e2e0d655ae8ee6d54c3f549fa1198_JaffaCakes118

  • Size

    2.8MB

  • MD5

    439e2e0d655ae8ee6d54c3f549fa1198

  • SHA1

    a75d453a91ddd370aff4381b450d34a35fbed27e

  • SHA256

    f9f8e0546c2a63a32c3cd2ada7d7e8e4b14e4365f7168ce84b25c5537f05e8a7

  • SHA512

    1d153f6e2ea3cda65ac60fde6b214b9debf43bc23a9b6bd9e900b960b7d4a4344ff02ae044b399330dbe0b74d2e8b3a2c7f612323282d9c3832509ed65decf54

  • SSDEEP

    49152:B0gmEfevz01hrmlDCC8osQLFArTcthsUwod4JHQK4uBEpk1GOO/:BpmEfebDsCxRoTgh1w3JHQK44Btu

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 439e2e0d655ae8ee6d54c3f549fa1198_JaffaCakes118
    .zip
  • TOL.rar
    .rar
  • Module/Flash.ocx
    .dll regsvr32 windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Module/mCache.plg
  • Module/mCapture.plg
  • Module/mDumpSwf.plg
  • Module/mFlashWrap.plg
  • Module/mJoy.plg
  • Module/mTolTrainer.plg
  • TOL_Client.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • TOL_Client.ini
  • info.txt
  • object.3ds
  • .txt
  •  ᮢ.txt