Overview

overview

7

Static

static

7

Client.exe

windows7-x64

7

Client.exe

windows10-2004-x64

7

Institution Help.chm

windows7-x64

1

Institution Help.chm

windows10-2004-x64

1

borlndmm.dll

windows7-x64

7

borlndmm.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4acfe4d7d49b7582259d5d6a0e2a5809_JaffaCakes118

  • Size

    420KB

  • MD5

    4acfe4d7d49b7582259d5d6a0e2a5809

  • SHA1

    53bb2deb9176f341f9f42cc945c24e19c8cc765c

  • SHA256

    6361b77cd0d20333a3f851c494d79f734a18a8e251bb7d3b4afa823ab66953fb

  • SHA512

    cc05f2a1a23f4df00f46f2e03ec14b21728458794d5113f2096357ed2f8aa8224462071b50395137559d87b13f2e79fec56436c5d8b0f508862efdb78cf46ae3

  • SSDEEP

    12288:fKTM9kY87XkrOBGFAMJM6tyWmPIWeYw8Zu:MM9kt7byAMJNyWn8U

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 4acfe4d7d49b7582259d5d6a0e2a5809_JaffaCakes118
    .zip
  • Client.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Institution Help.chm
    .chm
  • borlndmm.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections