Overview

overview

7

Static

static

7

CS͸...08.exe

windows7-x64

7

CS͸...08.exe

windows10-2004-x64

7

CS͸...in.dll

windows7-x64

7

CS͸...in.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b3ea957162b0e8a890ee3fb872f71bed_JaffaCakes118

  • Size

    19KB

  • MD5

    b3ea957162b0e8a890ee3fb872f71bed

  • SHA1

    b6e0ffb4e5b9250146e6d85c0644dd8806057ece

  • SHA256

    1658a94745d7d05cf642a00d1e8751b25431fff7aa1995e0ef8df19bd4858c81

  • SHA512

    2c4712184d66a04395b5a82c39a5ea1d2154d8fd3985a45eb437b847e61653bb71559818d7092ec94b40eab6ba45f61cc6f0ef7972b3b49396ca6911a629ac3f

  • SSDEEP

    384:h7P1eE/zwyZJ5HUBhPTPe6py6U5AbaOV2+Nzi17k2kO9qP6qQfFhm8X:h7P1P/zwwJZsN7e6py6UC2OA+li17kpM

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • b3ea957162b0e8a890ee3fb872f71bed_JaffaCakes118
    .zip
  • CS͸/CS2008.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • CS͸/fxin.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • CS͸/hoko.log
  • CS͸/ʹ˵.txt