General

  • Target

    e7e9b5310fd9950fbb8b3e43d1dd9e71_JaffaCakes118

  • Size

    668KB

  • MD5

    e7e9b5310fd9950fbb8b3e43d1dd9e71

  • SHA1

    2ab352ba4d0e9ff6575afec340eefdf5c4ca86da

  • SHA256

    bce2759f390a4a70474c56d69ed503effff5f26897a51e63d1ca1244d5195ee2

  • SHA512

    e56584dff789209fdb02d7330ca9d016ba5f3934b7b12b5f99fd91d40d7810a83b90d2a1cba1df5c1e160d1dec25309ba991faee92b3e2495cda56ddf49ad272

  • SSDEEP

    12288:1ojnP65eCy7FQLHXGqEex005gIMod82J3cnUyb9xitdz3ucVhpOu7Zy/VrUmHNzH:1ojnPQBVSeRddD3I98H3HVhpOsZy/Vwo

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e7e9b5310fd9950fbb8b3e43d1dd9e71_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections