Overview

overview

7

Static

static

7

ɢһ...EL.dll

windows7-x64

5

ɢһ...EL.dll

windows10-2004-x64

5

ɢһ...ry.sys

windows7-x64

1

ɢһ...ry.sys

windows10-2004-x64

1

ɢһ...��.exe

windows7-x64

5

ɢһ...��.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    57204142e8a93f9ea7a0bbe426dd83f4_JaffaCakes118

  • Size

    1.3MB

  • MD5

    57204142e8a93f9ea7a0bbe426dd83f4

  • SHA1

    81962f0bddcf6524a67c8a7a10dd2e3692d99bd3

  • SHA256

    1d77b7bc992ce25d96292390bda456426647d406d2f58f4d20a3faaf3e2ceade

  • SHA512

    0d0a97cdd74b23eacf59e9a1a6d46e1752194ef4615b6c2a42c9afefaddee954f96506e8cf39ae90e02289d72de39b2c67dffa232418ab0ac92bc77a571bdbbc

  • SSDEEP

    24576:0+E7DCGmcj2vuTXcmlXbfalIuiXl9yF6PnGl215y6YjHB3MOwYOq9j:i7DCMaEhlLfaquwlMl2/TYrBr9

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 57204142e8a93f9ea7a0bbe426dd83f4_JaffaCakes118
    .zip
  • ɢһҽ,һķ/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ɢһҽ,һķ/superec.ProcessMemory.sys
    .sys windows:5 windows x86 arch:x86

    790a705bb6e01a5ec06e60aeca34cb54


    Headers

    Imports

    Sections

  • ɢһҽ,һķ/ɢһҽ,һķ.exe
    .exe windows:4 windows x86 arch:x86

    3b9089498506f4b82bcbedac328171f6


    Headers

    Imports

    Sections