General

  • Target

    e965668e5c6415644fad3b1bc3cc390d_JaffaCakes118

  • Size

    224KB

  • MD5

    e965668e5c6415644fad3b1bc3cc390d

  • SHA1

    50d7b66cd29e3f0d6280d22bc64e9192dc28cc87

  • SHA256

    efb365b9b08a35d4578d85170b2ba0943891d9f85eeb6fd5291d12204876c2eb

  • SHA512

    b1ae396d2da3726fb4b62916199dc29f9a71c8f266a0c45279aab9dc23c41cb2e489e784c4ef1746de0d19ae77c6777b82f9263430bdbad423dd678e62f0f95d

  • SSDEEP

    3072:swx6y/vq72fvYI6Sm1CDS2cG67V7pi8L+ZFSDd98A665HFqzKGyrWxMlsXXwMcrW:swx/C2G6SDG6dphYB365sryrXlsnll

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e965668e5c6415644fad3b1bc3cc390d_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections