General

  • Target

    ebba5f4ff96e2cfe8f30293cb6854266_JaffaCakes118

  • Size

    19KB

  • MD5

    ebba5f4ff96e2cfe8f30293cb6854266

  • SHA1

    49f94d0db6914289d3e1753ede1da83cd31ce325

  • SHA256

    d0f196dda97407ca90a39c3aa610f55bfdd3fde7872737b64da75c4d9c289ffd

  • SHA512

    8badbd27a0138f712a6c263e0f351fca4da7d27602c1ef30c4849f20c1628026acea8c14c75c38a6791ce6f6a38067939fc6e94c59da115899690cc5ea176494

  • SSDEEP

    192:ttQgZjnH2ycoM+iIliGZXOqc3rfznUCRyEpq647zaKUS604ujOrQRa4Hj83OiFX4:ljWyxM+iIZnClRydcuir+a4DUZr9YWg

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ebba5f4ff96e2cfe8f30293cb6854266_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections