Overview

overview

10

Static

static

10

AntiVC.dll

windows7-x64

10

AntiVC.dll

windows10-2004-x64

5

eweibo_hzh.exe

windows7-x64

10

eweibo_hzh.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    15eca7d0ba862185ddd34ff3ef96b99b_JaffaCakes118

  • Size

    414KB

  • MD5

    15eca7d0ba862185ddd34ff3ef96b99b

  • SHA1

    a0f5648f7774e3af820d1c6041fc19a60fae2d6c

  • SHA256

    8bfcfbe8122840dbbccd123c3ac9e758f299c6435da526c5f9e421e31f55629b

  • SHA512

    bd65e571c057af95349ce6224b3ba0bf72c1046e9c43b3b3445107961dc7b7622859b858d7ad71a2eedd2b8baaedb908e6e92d5b5e9b4645e938edf2d5c66789

  • SSDEEP

    6144:w3s2XjvHvMCwYRvzQosaobQvmZiqi3CAnbEOQ6rYDt9KV5n2OXn2yh9FHdW:w3Lj3ceviPQ3BS2QOXrYDt0SOGSFHw

Score
10/10
upxaspackv2blackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 15eca7d0ba862185ddd34ff3ef96b99b_JaffaCakes118
    .rar
  • AntiVC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • eweibo_hzh.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • matlab.lib