Overview

overview

7

Static

static

7

2007241082...ar.bat

windows7-x64

1

2007241082...ar.bat

windows10-2004-x64

1

2007241082...rt.dll

windows7-x64

1

2007241082...rt.dll

windows10-2004-x64

7

2007241082...rt.exe

windows7-x64

7

2007241082...rt.exe

windows10-2004-x64

7

2007241082...��.url

windows7-x64

1

2007241082...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    667e645f82a28b57a194f4f9e20a1887_JaffaCakes118

  • Size

    22KB

  • MD5

    667e645f82a28b57a194f4f9e20a1887

  • SHA1

    aea7c62c28b2cc1709e6fdd8233711de120c7cda

  • SHA256

    a3e0b478f4990a9b8164327fa8cc2557a03391c631c9e87457ab72027108af11

  • SHA512

    253b16e0df580f3c5e3f943b00470eff8a0de6f042130ab056444603fcf1b613535777d4f8d04f87164aef27d0341e57ceede403e9f3bd7bde0b80e246d731c3

  • SSDEEP

    384:QhYvYQfPLEiYnejlf4Ck/KZ4hL0BoT6W218BGbaQXe9Fil7JuMh9iZIL2ua3:QDAQVeZfCKGhQBOfBGbduYlEMpK3

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 667e645f82a28b57a194f4f9e20a1887_JaffaCakes118
    .rar
  • 2007241082693/Clear.bat
  • 2007241082693/HookDLL/Insert.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 2007241082693/HookDLL/Insert.dpr
  • 2007241082693/HookDLL/JumpHook.pas
  • 2007241082693/HookDLL/MainForm.pas
  • 2007241082693/HookDLL/Publics.pas
  • 2007241082693/HookDLL/Threads.pas
  • 2007241082693/IconRes/LiuMazi.ico
  • 2007241082693/IconRes/LiuMazi.res
  • 2007241082693/IconRes/LiuMazi.txt
  • 2007241082693/Readme.txt
  • 2007241082693/StartEXE/Start.dpr
  • 2007241082693/StartEXE/Start.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 2007241082693/下载说明.htm
    .html .js polyglot
  • 2007241082693/新云软件.url
    .url