Overview

overview

7

Static

static

7

Mayhem.dll

windows7-x64

7

Mayhem.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b5d3398d737ccc2350f240f8e5aa3e2c_JaffaCakes118

  • Size

    248KB

  • MD5

    b5d3398d737ccc2350f240f8e5aa3e2c

  • SHA1

    15de80d142c670016b8b70362630a986cede094f

  • SHA256

    44118f515f7720af7d867afd5d185a81737b1d8bc5e1916fc48dee05453cb067

  • SHA512

    c06cbe80fb73927b50ae3e24cbf8d8c7037693256aa3683b2e7397c76fceb654b6d27905eba26eafc3a55f8629cfad3870860d49fb5854813c36909f1745bf8f

  • SSDEEP

    6144:YzL9VKWhCr/bD232KansHuN7RcNuexqaBGdQc4c3:A9VKNEag67GoewQG

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b5d3398d737ccc2350f240f8e5aa3e2c_JaffaCakes118
    .rar
  • Mayhem.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • binds/binds_cstrike.cfg
  • binds/binds_czero.cfg
  • binds/binds_dod.cfg
  • binds/binds_ns.cfg
  • binds/binds_nsp.cfg
  • binds/binds_tfc.cfg
  • binds/binds_ts.cfg
  • binds/binds_valve.cfg
  • colors.cfg
  • cvars/cvar_cstrike.cfg
  • cvars/cvar_czero.cfg
  • cvars/cvar_default.cfg
  • cvars/cvar_dod.cfg
  • cvars/cvar_ns.cfg
  • cvars/cvar_nsp.cfg
  • cvars/cvar_tfc.cfg
  • cvars/cvar_ts.cfg
  • cvars/cvar_valve.cfg
  • hackhide.cfg
  • headshot.cfg
  • hlss/3Inposition.wav
  • lan.cfg
  • main.cfg
  • menus/menu_cstrike.txt
  • menus/menu_czero.txt
  • menus/menu_default.txt
  • menus/menu_dod.txt
  • menus/menu_ns.txt
  • menus/menu_nsp.txt
  • menus/menu_tfc.txt
  • menus/menu_ts.txt
  • settings1.cfg
  • settings2.cfg
  • settings3.cfg