Overview

overview

7

Static

static

7

百度大�...EL.dll

windows7-x64

7

百度大�...EL.dll

windows10-2004-x64

7

百度大�....0.exe

windows7-x64

7

百度大�....0.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    dbe2530df59086c57604cf5679e61a9d_JaffaCakes118

  • Size

    422KB

  • MD5

    dbe2530df59086c57604cf5679e61a9d

  • SHA1

    a3f7432e95337248576df5295a0c46ddf6b5df39

  • SHA256

    c1372ac9c8c4f790b68c717aeefd28b82f0087587d8d7c2c6ae581c95ef606fc

  • SHA512

    ad58334c894fb72286ebcd5e89bd5aef92a0eaef5b87d760b95da24d9fe7d375d6e8abf1b6f3dd80fd2aeb9f6c3083406b8581ca2eda49ea57871ac390fccaaa

  • SSDEEP

    12288:/sZkAVA4nFWkL7IGvSiIpnkQ4U5T20YvqQm:/sLA4nFWkL7tynV4QRll

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dbe2530df59086c57604cf5679e61a9d_JaffaCakes118
    .rar
  • 百度大脚丫/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 百度大脚丫/百度空间大脚丫 V2.0.exe
    .exe windows:4 windows x86 arch:x86

    8ecd44b942556565bdb1c9b7f83938cc


    Headers

    Imports

    Sections