General

  • Target

    f49b55a0e8a030bcc6fd58a9245baacc_JaffaCakes118

  • Size

    45KB

  • MD5

    f49b55a0e8a030bcc6fd58a9245baacc

  • SHA1

    db65912eaf9f106b26687d20d188e28c4c520256

  • SHA256

    10683dfcd35ecd01dff49cf41bd916b6f437d3e705ded2f751d652419582cf6f

  • SHA512

    2fba38c8f168e0038f40a78cf796156ba27d18234a99df62d6f75b76e4c78952622a18eff904f79a9ea19dc09233301f84554c794540f229740cbdc227c3c98f

  • SSDEEP

    768:NL8jxCw8xQE4glPlnnvHTDhVY1gyCb9gdok68fUdgRzIdrSXhTzBEoYsBq/fg:5oCltlPdnvpygBbquk68fjRzIFYzSonX

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f49b55a0e8a030bcc6fd58a9245baacc_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections