Overview

overview

7

Static

static

7

HtmlView.dll

windows7-x64

3

HtmlView.dll

windows10-2004-x64

3

SkinH_EL.dll

windows7-x64

5

SkinH_EL.dll

windows10-2004-x64

5

eAPI.dll

windows7-x64

3

eAPI.dll

windows10-2004-x64

3

iext.dll

windows7-x64

3

iext.dll

windows10-2004-x64

3

iext3.dll

windows7-x64

3

iext3.dll

windows10-2004-x64

3

internet.dll

windows7-x64

3

internet.dll

windows10-2004-x64

3

krnln.dll

windows7-x64

3

krnln.dll

windows10-2004-x64

3

spec.dll

windows7-x64

3

spec.dll

windows10-2004-x64

3

�...��.exe

windows7-x64

7

�...��.exe

windows10-2004-x64

7

�...��.exe

windows7-x64

7

�...��.exe

windows10-2004-x64

7

�...԰.url

windows7-x64

1

�...԰.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45dd827f2161362c2d7c0be466e26200_JaffaCakes118

  • Size

    2.4MB

  • MD5

    45dd827f2161362c2d7c0be466e26200

  • SHA1

    061e9986bb7290be37ca2e839634952131a2ab34

  • SHA256

    69ba622a29b0c420465011a2413ae5e16cc0a6c8c3933b2d0b936f5ca1c134b4

  • SHA512

    e1d9b554890894bbbc1087e57af7f3207684d1652421eb4ed37ed9163fe7df99c2f847793ac418df64cc8d56e9790cd15e3eca92de0679a203604ccd86b9f9df

  • SSDEEP

    49152:kFSWgNtz7lDwaUpOukVUlYyvZ6c5UMDa+Aw+Xar2:60vxDwLAL1yvmMn2

Score
7/10
upxvmprotect

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 45dd827f2161362c2d7c0be466e26200_JaffaCakes118
    .zip
  • HtmlView.fne
    .dll windows:4 windows x86 arch:x86

    4dd740d34ccc499f7834e48dc7fd30a4


    Headers

    Imports

    Exports

    Sections

  • SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • eAPI.fne
    .dll windows:4 windows x86 arch:x86

    f45783432178cbfb9ace2017b14127dd


    Headers

    Imports

    Exports

    Sections

  • iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • iext3.fne
    .dll windows:4 windows x86 arch:x86

    828de777d0d26938b2b88952971795a1


    Headers

    Imports

    Exports

    Sections

  • internet.fne
    .dll windows:4 windows x86 arch:x86

    947a94c34d0476950a2cd72e8004382c


    Headers

    Imports

    Exports

    Sections

  • krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • spec.fne
    .dll windows:4 windows x86 arch:x86

    be3fe1d11f8ee4e772d13163095b126a


    Headers

    Imports

    Exports

    Sections

  • ؿĵ.txt
  • 3޸V1.1.exe
    .exe windows:4 windows x86 arch:x86

    4b7e87111c541b22b4d64e49eb3bb99d


    Headers

    Imports

    Sections

  • 3޸V1.1.exe
    .exe windows:4 windows x86 arch:x86

    f7be333f595616b73a99e67ea63157ad


    Headers

    Imports

    Sections

  • ԰.txt
  • ԰.url
    .url