General

  • Target

    f65f5b96fea573b005665162897052f5_JaffaCakes118

  • Size

    170KB

  • MD5

    f65f5b96fea573b005665162897052f5

  • SHA1

    dbc47243d06110508f26e38efc7fcfe7bff98740

  • SHA256

    1bbba14df4a3ab4de11af45d948d1251309e83c969891a3d0eababf7ba483b73

  • SHA512

    d974bf97c6b138c6c4b9e3a58640cd5e80587e03c8f9b0f84adc33ab5aa584f47061efffb8ce41dec2c668968ec899647fe1cf2be7c7342505a082a45b8fccad

  • SSDEEP

    3072:cgqr5GMkSx6kmnSz9ekVkvhefYFaDuK6oacI91:QEMJI55Zefeltcg1

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • f65f5b96fea573b005665162897052f5_JaffaCakes118
    .rar
  • Tears_in_Heaven/Tears in Heaven v1.9[Public]/Tears in Heaven.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Tears_in_Heaven/Tears in Heaven v1.9[Public]/Tears in Heaven.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Tears_in_Heaven/Tears in Heaven v1.9[Public]/Инструкция.URL