Overview

overview

7

Static

static

7

elfbot.dll

windows7-x64

7

elfbot.dll

windows10-2004-x64

7

elfload.dll

windows7-x64

7

elfload.dll

windows10-2004-x64

7

elfload2.dll

windows7-x64

7

elfload2.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b45d7c17f4b31c9f4e1cd793141e7e4d_JaffaCakes118

  • Size

    891KB

  • MD5

    b45d7c17f4b31c9f4e1cd793141e7e4d

  • SHA1

    8c354b2eec675735cdb8a91fa586eeab929fcb85

  • SHA256

    a7d8fad69caf6f20b0e5d0dc32a68b382b6100baf5ca7895ff98f1146fb6a58a

  • SHA512

    98f8e93e56f5803e52c96a74ffb8d2008f5a82608bd54704e0600ab29edb642045682958fa39f212159a83dd4e2ecba9714bbf45b32e85ea73974aaaf7de5379

  • SSDEEP

    24576:aqve97MUZjg9qI2e0IwluMAwtA2NptIeVvsDqS5k60MU:Xs7MgEpYmcItDqS5O7

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • b45d7c17f4b31c9f4e1cd793141e7e4d_JaffaCakes118
    .rar
  • elfbot.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • elfload.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • elfload2.dll
    .dll windows:4 windows x86 arch:x86

    095172e783427c1a2072d5926f867e01


    Headers

    Imports

    Sections