Overview

overview

7

Static

static

7

穿越火�...EL.dll

windows7-x64

7

穿越火�...EL.dll

windows10-2004-x64

7

穿越火�...��.url

windows7-x64

1

穿越火�...��.url

windows10-2004-x64

1

穿越火�...��.exe

windows7-x64

3

穿越火�...��.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    bf5be86dae1e2c7cfe9e4bb5e3ee1aaf_JaffaCakes118

  • Size

    1.5MB

  • MD5

    bf5be86dae1e2c7cfe9e4bb5e3ee1aaf

  • SHA1

    ceb158b810eff52f061620426e7f4c843d13ba12

  • SHA256

    3c927265c68ce765da18aaf93059abfa6e80c3f46ead3e149fc8233dd42c6e3a

  • SHA512

    321b4658e194832b7cfbad5ef2c2b0e4f096c672b74b060d62bbc77d1d8edc938f5c392155d84c6a88f7b61f5cb5e3c0afd5530c893b3fe424212bcee1323ca0

  • SSDEEP

    24576:v/ix1maDLknkLqnOk1BrfxgIE+9ca6/v0E/5TBt4dg2LdO11SMoMpUyDiky7GO:XiHDL2kunOk1Bfxg4bQswBBadg2LdQBU

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bf5be86dae1e2c7cfe9e4bb5e3ee1aaf_JaffaCakes118
    .rar
  • 穿越火线狙神透视辅助v3.6最新版/CF.png
    .png
  • 穿越火线狙神透视辅助v3.6最新版/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 穿越火线狙神透视辅助v3.6最新版/下载银行-提供免费绿色软件下载.url
    .url
  • 穿越火线狙神透视辅助v3.6最新版/下载银行.txt
  • 穿越火线狙神透视辅助v3.6最新版/狙神辅助说明.txt
  • 穿越火线狙神透视辅助v3.6最新版/穿越火线狙神透视辅助v3.6最新版.exe
    .exe windows:4 windows x86 arch:x86

    dd9bb9a25e85a6ee9e21ec988c13c1ce


    Headers

    Imports

    Sections