Overview

overview

7

Static

static

7

WSockExpert.exe

windows7-x64

7

WSockExpert.exe

windows10-2004-x64

7

WSockHook.dll

windows7-x64

7

WSockHook.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b71136d43614648f2bb32f7b3b9826e2_JaffaCakes118

  • Size

    257KB

  • MD5

    b71136d43614648f2bb32f7b3b9826e2

  • SHA1

    ae562a26da18cf94ffe4801c181bddb369fea26e

  • SHA256

    27d289d5f844f7155d068cea7bd4b3825da727590a44b1d4417849029c0e8172

  • SHA512

    76547eb39bb2477089a8f149811b6e85b216a5d3a01079195ed61bda7e986c828263a92d8d7c4bba3bebbdbd027bb93d7baad2cb3586181b8db2474b0a154f73

  • SSDEEP

    6144:pyKxOX9TT0uCR6iZcG/FlmT2ekolppp7CKg6CHACzgGLQbzyToHHhm+ysc:mTWR6iuG/oka/tgnTpQvjhmic

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • b71136d43614648f2bb32f7b3b9826e2_JaffaCakes118
    .rar
  • WSockExpert.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • WSockExpert.ini
  • WSockExpert.txt
  • WSockHook.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:1 windows x86 arch:x86


    Headers

    Sections