Overview

overview

7

Static

static

7

EventNT.dll

windows7-x64

5

EventNT.dll

windows10-2004-x64

5

NTEView.exe

windows7-x64

5

NTEView.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    17f3fabd1c166289a63620d9ea1e9419_JaffaCakes118

  • Size

    57KB

  • MD5

    17f3fabd1c166289a63620d9ea1e9419

  • SHA1

    ad0897e622be2d59983bf8f29879e9fd148ca286

  • SHA256

    7d48acd486a91ab11c3c95c5dd7cb09d95babdeb6ca1749b9cc6c13ce6da7ca5

  • SHA512

    a5c259aca13cd89ca81d2f98e85036b445a4822ecc114103b2903700a9050a96489a9c9ef11daa99f5556f6528875882977a4757dfe1877ba9cea3de359d86d4

  • SSDEEP

    1536:ALRhpPRg3s7gLpvft/lUAxAPxASpdw8NYZSNVaTK3:ApPRXw/DwKSpdVNYZET3

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 17f3fabd1c166289a63620d9ea1e9419_JaffaCakes118
    .zip
  • EventNT.wfx
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:1 windows x86 arch:x86


    Headers

    Sections

  • History.txt
  • NTEView.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • readme.rus
  • readme.txt