General

  • Target

    15bf39761821829189acdfb8d7d285f4_JaffaCakes118

  • Size

    1.9MB

  • MD5

    15bf39761821829189acdfb8d7d285f4

  • SHA1

    4f7f8a60c1c4f1c059f86d73c0e278b4cd420464

  • SHA256

    c4350c5d33ffe3f8599d03135d32903b4a567d2b75a2b67836e919db71f3712e

  • SHA512

    85feba8392a95ffc15e25ca62647c28c4341d19091593c00a18f45224855ccdd472243e7d0acbd0731a3df3744e477750060e3bddaae999ffd3ea6ef7fd2e84c

  • SSDEEP

    49152:RAMaKuZwi7vJD2ICJIyWT49+Uquo5fHDLtOu6c06t+zYLzW:zuZhzJXcmT49+UToptObZ6tHa

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 15bf39761821829189acdfb8d7d285f4_JaffaCakes118
    .rar
  • 数据库管理器/DLGrid.dll
    .dll windows:5 windows x86 arch:x86

    71f6e0c2f98ed5ab188c12a8ae6749d5


    Headers

    Imports

    Exports

    Sections

  • 数据库管理器/DL_DEBUG.dll
    .dll windows:5 windows x86 arch:x86

    48fcfd81e2ba964da66471928be8abca


    Headers

    Imports

    Exports

    Sections

  • 数据库管理器/NetDB.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • 数据库管理器/NetDB.ini
  • 数据库管理器/SqliteDB.ico
  • 数据库管理器/SqliteManager.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 数据库管理器/libmySQL.dll
    .dll windows:4 windows x86 arch:x86

    3f2264a358061fb23e0a678c916babfd


    Headers

    Imports

    Exports

    Sections

  • 数据库管理器/sqlite3.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • 数据库管理器/解释数据库.db
  • 数据库管理器/配置.ini