General

  • Target

    f24500c0c2ac71b468a62ea51c2c6227_JaffaCakes118

  • Size

    347KB

  • MD5

    f24500c0c2ac71b468a62ea51c2c6227

  • SHA1

    28c19814365bf355e4838c91147f8bbe6e17b1e3

  • SHA256

    a3be77c62917711c4c6baf967854647790bc18cba15c9cd17ac6abbc4c61a740

  • SHA512

    614ae0aa6d34d51dab18bef57276865d243b30227379dfa112a942639946a978c48e78a92d24e3cc153920da762f935a3ba5fd4268cb8621c6047704d76b6efd

  • SSDEEP

    6144:Kq0pa0r5FILbOA3RY+07FQeoJJ5quru6DancGfHP9/eEbL5T/L3kea3qOBoDf:Kq0/FC3RY+07FQHJ5quruaanccVb/5Lh

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f24500c0c2ac71b468a62ea51c2c6227_JaffaCakes118
    .dll regsvr32 windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections