General

  • Target

    f0dec3ea2870f52e98725783216fecb2_JaffaCakes118

  • Size

    90KB

  • MD5

    f0dec3ea2870f52e98725783216fecb2

  • SHA1

    39e67a2dbb6c618c0e11be65a18b9e39387fac9a

  • SHA256

    4b92a9a55bbd077ecec112586bc6400e8ef90ddde478c1cbcfeecb208e85f8a9

  • SHA512

    6e5a96318d1f06be455746e480acc978180b656645e878fb287d48a4d3be8bc5cd9f945147f9026282261bb2caaf94ffae44902fefe691bf138810159226a807

  • SSDEEP

    1536:aYvynn+A2V7uC5Z7wIe/hmQpnDfnt+TAZi/UaMpRLA5PO+p4qm/p8Ezie2InDxOl:Xv4+AyB1e/hvpnsTAjh8W+qqm/pet2Dw

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f0dec3ea2870f52e98725783216fecb2_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections