�˵�
Behavioral task
behavioral1
Sample
lolxc/LOL星辰辅助V9.4【超强脚本+超强躲避】/lolxc.dll
Resource
win7-20240729-en
General
-
Target
d55c33f3970ac4b9e7c92c1f9efd7b71_JaffaCakes118
-
Size
1.9MB
-
MD5
d55c33f3970ac4b9e7c92c1f9efd7b71
-
SHA1
c8aed20af7a3935a7d7ceb104b79351eaa8a9c15
-
SHA256
981d164c4e2be03a1bc4b67a8698f7c8f2a0cf7a96c4b4429454b44be9af960a
-
SHA512
3c107c514f2a8bee24202a116f49c5ef2a065bc3cb7e386b19bc2f8c8b762e13dbea0742eb6a08fd3dd4d9bb75c52ece6fec5b0eaf6e76bcef02ff0b6688bb00
-
SSDEEP
49152:jL55ITgt7+HKAYnIifaL9Fq71ipLhEnmfDP9M4/jx:/55I8AHDGfk9oBipKmfDP9hjx
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack001/lolxc/LOL星辰辅助V9.4【超强脚本+超强躲避】/lolxc.dll acprotect -
resource yara_rule static1/unpack001/lolxc/LOL星辰辅助V9.4【超强脚本+超强躲避】/lolxc.dll upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/lolxc/LOL星辰辅助V9.4【超强脚本+超强躲避】/lolxc.dll
Files
-
d55c33f3970ac4b9e7c92c1f9efd7b71_JaffaCakes118.rar
-
lolxc/LOL星辰辅助V9.4【超强脚本+超强躲避】/lolxc.dat
-
lolxc/LOL星辰辅助V9.4【超强脚本+超强躲避】/lolxc.dll.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 632KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE