Overview

overview

10

Static

static

7

Herool_v0....3b.exe

windows7-x64

10

Herool_v0....3b.exe

windows10-2004-x64

10

Herool_v0....e3.dll

windows7-x64

5

Herool_v0....e3.dll

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    03091c98275294e858e5f7f5959fe762_JaffaCakes118

  • Size

    886KB

  • MD5

    03091c98275294e858e5f7f5959fe762

  • SHA1

    d6098259953da20457cd1c2cbc5a8f4784004692

  • SHA256

    ddcb6cc15dd78ed0b8778305fa8060827f6afba1866bf03fa3572d037448129d

  • SHA512

    d47665f891f707881be38be58c78583cde9eebdb1ec96d2c3edd275eb77f52f61b0f3a19f5c90c043bd38cc8d197a982bf9b76c9a4fd1d6b555bb65c7dfe68a1

  • SSDEEP

    24576:GAfGQKalkH8IfZD0E0mbEZ03d4MdhSdvXaPC:3XoH9fZXfW2dVhS5YC

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 03091c98275294e858e5f7f5959fe762_JaffaCakes118
    .rar
  • Herool_v0.3b/Language/Default.ini
  • Herool_v0.3b/Language/English.ini
  • Herool_v0.3b/Language/Spanish.ini
  • Herool_v0.3b/Profiles/Tarik.ini
  • Herool_v0.3b/Profiles/legolasd.no-ip.info.ini
  • Herool_v0.3b/herool_v0.3b.exe
    .exe windows:5 windows x86 arch:x86

    faef52e810dfe941ac6c2c5449f6090f


    Headers

    Imports

    Sections

  • Herool_v0.3b/sound.wav
  • Herool_v0.3b/sqlite3.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections