Overview

overview

7

Static

static

7

Boleto.dll

windows7-x64

5

Boleto.dll

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    2b6488ec63988ae0a0baababa5936940_JaffaCakes118

  • Size

    337KB

  • MD5

    2b6488ec63988ae0a0baababa5936940

  • SHA1

    d8c6fbf525f787b844ed9113ade3d543a577b68a

  • SHA256

    e351a1cc541a5fd4f30f8838b0fda31d5d9777c06d924b4e9942809a9f6968c0

  • SHA512

    0228b57b6c1c3fa1782fc2e888d8482470651a614ce9d40a3b0b44daa133434a667f6eb66b359d7f1b753bacebb43706dcf0cc755c6cb01f1cfb002d9eb7cf6c

  • SSDEEP

    6144:I2N7GakVZibIgBZkG1tBUZsBctX9e4FeNCSBbYHP:1N7OZD2Zh18ikte4FeN9YHP

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b6488ec63988ae0a0baababa5936940_JaffaCakes118
    .zip
  • Boleto.cpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections