General

  • Target

    ecab008278219a5c85a731837151090b_JaffaCakes118

  • Size

    89KB

  • MD5

    ecab008278219a5c85a731837151090b

  • SHA1

    e8ffe6bc49b5ab2983a51f3d86f15a9834793fe4

  • SHA256

    d0d294ad27d1d05773e0f937d1c704337decb80f5d21170429177d9bd28214c3

  • SHA512

    6e8358f2eff5fa9656afbf208a56b07f36af03a60c275ba7df37d601a1b3d5e99f4cd0f764098443cbf79b4f8780bab53ecefba02e865ebdc75aeb60fc23c014

  • SSDEEP

    1536:W6c2bcATlbcKNyRAOLglWM6fJLmth/1DKqzM3ofgihsTDEdHS55NZjjewuaLzrjJ:WkI0tvwutyxmf/1DlboiyfEdHSDNZHVN

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ecab008278219a5c85a731837151090b_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections