Overview

overview

7

Static

static

7

Archnoobs/elfbot.dll

windows7-x64

7

Archnoobs/elfbot.dll

windows10-2004-x64

7

Archnoobs/elfload.dll

windows7-x64

7

Archnoobs/elfload.dll

windows10-2004-x64

7

Archnoobs/...d2.dll

windows7-x64

7

Archnoobs/...d2.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d23b9751ce3578c8fe12dd46cf74cd3f_JaffaCakes118

  • Size

    895KB

  • MD5

    d23b9751ce3578c8fe12dd46cf74cd3f

  • SHA1

    0112f492b987eb7a946e3b7a8e2edc2c189faf8a

  • SHA256

    e80668b37e2acda06aa2f8195dc804867d09135db4063600b61fd79f6d40ac43

  • SHA512

    12349923728f69799e4d5a119a67c6aea60ea957794f0a6b77a7d4ebc0c674a7520180eacc5f782fb85f70e127d3a4c827fc5ff03db37f67f3922e886555b701

  • SSDEEP

    24576:63prp/tfAid27rlrdg6yNIcL+rWsSVaPc3uZ3Ik:292iwNKNaPouF

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • d23b9751ce3578c8fe12dd46cf74cd3f_JaffaCakes118
    .rar
  • Archnoobs/elfbot.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Archnoobs/elfload.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Archnoobs/elfload2.dll
    .dll windows:4 windows x86 arch:x86

    095172e783427c1a2072d5926f867e01


    Headers

    Imports

    Sections