Overview

overview

7

Static

static

7

d6f1c0fa0c...18.dll

windows7-x64

7

d6f1c0fa0c...18.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d6f1c0fa0ca99627d64bb91a138898b0_JaffaCakes118

  • Size

    28KB

  • MD5

    d6f1c0fa0ca99627d64bb91a138898b0

  • SHA1

    fb153a314c1ff5f1d39146ecbd8ac88eac5020fb

  • SHA256

    2ab347235d7837d5691744a2941c42f03724573fe5c97b94403454bd1a1fcbb9

  • SHA512

    de2cfbed11015d7214e661224ab00fa65932f6be8d39ffb1dcd4cea5758f046b8867480565627613273670d3b997591f8d8ba320cbc2316acb82bec6c39936e0

  • SSDEEP

    768:84wHlM069FLwgZxgAAxkqU8+dSAiwt4lW6wJc:xwHPKFMgZxA+dZzJc

Score
7/10
upxvmprotect

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d6f1c0fa0ca99627d64bb91a138898b0_JaffaCakes118
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections