Overview

overview

7

Static

static

7

Module/Flash.dll

windows7-x64

5

Module/Flash.dll

windows10-2004-x64

5

TOL_Client.exe

windows7-x64

6

TOL_Client.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    f577ce3793b5e1f515b9aa3e4144ea48_JaffaCakes118

  • Size

    2.8MB

  • MD5

    f577ce3793b5e1f515b9aa3e4144ea48

  • SHA1

    984f34dda363d33d18ec68600c17b20aeca59e78

  • SHA256

    f4be7e007d2f64c646c4eacc76741e082817ca31127061930fc7e3366b634234

  • SHA512

    aac29ba8521d2fc39d34e2e17d093779136b6eb77b019c7ed7b7626fd1682a14f9102666f68248032bc5e7146c5d4774d0c0c9d9daeaaf1a6f25dc25e54310e3

  • SSDEEP

    49152:Z+/etXW9hRWDJCokoyQz3uVzCDhs22obIhVQsCuBc341gxB:Z+/epH4o5pOzYh72lhVQsC4LMB

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f577ce3793b5e1f515b9aa3e4144ea48_JaffaCakes118
    .rar
  • Module/Flash.ocx
    .dll regsvr32 windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Module/mCache.plg
  • Module/mCapture.plg
  • Module/mFlashWrap.plg
  • Module/mTolTrainer.plg
  • TOL_Client.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • TOL_Client.ini
  • info.txt