General

  • Target

    f049a08dd65e4ab04575b3667e56a408_JaffaCakes118

  • Size

    22KB

  • MD5

    f049a08dd65e4ab04575b3667e56a408

  • SHA1

    1f0270794587cb51b514cfda5b040c08cdd18212

  • SHA256

    054b8d2a6d9175fe956d62f4c09f836180d649dda46b13edf18a6c9cbad35c8f

  • SHA512

    5792c77508e021cb67f06d3d8cc907b86d6ad4ccf92b02ad60987113e921d7c1187ee872f369210fd18749d5c85d2a4c09de0039a21bef58c0ee9d6fd610e44d

  • SSDEEP

    384:GwnDjWEr3Pu0LE2y+PZHz42CsH58lUErrbXJRFfEH72rWtB:lDr/u0UUEDpECrU

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f049a08dd65e4ab04575b3667e56a408_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections