General

  • Target

    eb52b54154700641c4beea50731aaed7_JaffaCakes118

  • Size

    2.7MB

  • MD5

    eb52b54154700641c4beea50731aaed7

  • SHA1

    b3d8b0e563d8121433af9e3f735e428657195d72

  • SHA256

    88bb19b42bd46118bf5dbd7588fc081cd1aac6681919a757289a1ef3322db4bf

  • SHA512

    33d403eace5f7399dd4984088358057a93f472bffdee74d61af0bca79ecadc0b6d6d449df867b89e2f303a8911c46c75bb837b06d26b564cd5e34b697d3754e1

  • SSDEEP

    49152:DpIzIe8+JE/n3FYG2nB3IIO926ibsd5hsKsNiIBCMJcrq8DgS1jMK9:NI02m/OfnBIIMDiWns8IFJcJnJM4

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • eb52b54154700641c4beea50731aaed7_JaffaCakes118
    .rar
  • 生死狙击卡里辅助 1.0绿色版/dm.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 生死狙击卡里辅助 1.0绿色版/复件 使用说明.txt
  • 生死狙击卡里辅助 1.0绿色版/复件 绿软基地.url
    .url
  • 生死狙击卡里辅助 1.0绿色版/生死狙击卡里辅助v1.0.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections