Overview

overview

7

Static

static

7

b1f31605f0...18.dll

windows7-x64

7

b1f31605f0...18.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b1f31605f03a5b56bfae5983a4ae1d56_JaffaCakes118

  • Size

    652KB

  • MD5

    b1f31605f03a5b56bfae5983a4ae1d56

  • SHA1

    7d44b1bd3969645852d7658299d69e76ca5e30e2

  • SHA256

    b9f4274d9ccf3247aba8edb7d4aed7e8dea53fc1e9d1dc02c0557939fb0f2592

  • SHA512

    bd43761ddf6b8d73163dd3423c14de82d8364796eb2fb49c5bccf1e032db9c6ff94ab1ee53781219c3a53bc8be4f6a009c44405c9e005a1b61d3465d5b8820ab

  • SSDEEP

    12288:G1ULVVx3nET+EUfpi/N8d/NxZ0ZnmgtF3U0LCVwBVyAPG1lkK+QjJiuXTQ:IcRnxfp2S1NxZsn4hVcVyRyWJXXT

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b1f31605f03a5b56bfae5983a4ae1d56_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections