Overview

overview

7

Static

static

7

wh for csv...am.dll

windows7-x64

3

wh for csv...am.dll

windows10-2004-x64

7

wh for csv...am.exe

windows7-x64

7

wh for csv...am.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1686dd3c5a6fc9cdca16875c62b0d84_JaffaCakes118

  • Size

    2.9MB

  • MD5

    e1686dd3c5a6fc9cdca16875c62b0d84

  • SHA1

    9f453ea6219cf33d7dcceff46cd00a118c1c89be

  • SHA256

    0b4e23302cdcebe5e4a7a584281e1703ec8c6bbb9753d9f6208a25a4611114ae

  • SHA512

    be5699801856e6e55b5d9c775e040cb58b3038ee77a272fb90c9ca11b159014f653343f1d3053cf900b5bc536fff463a61ec3ce9fb57641af202232e7fa2edf0

  • SSDEEP

    49152:tLdXTEQPnv71SPvPWrEXQQCzqeeVTlaRwK4sTEQPnv71SPvPWrEXQQCzqeeVTlaa:tLBTzv7mvPLXUeeeVpaTzv7mvPLXUeem

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • e1686dd3c5a6fc9cdca16875c62b0d84_JaffaCakes118
    .rar
  • 1mb
  • 2mb
  • wh for csv34/configs.cfg
  • wh for csv34/helperprogram.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • wh for csv34/helperprogram.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • wh for csv34/release.txt