General

  • Target

    f526a24a6b64fe5b1497c28590e55062_JaffaCakes118

  • Size

    80KB

  • MD5

    f526a24a6b64fe5b1497c28590e55062

  • SHA1

    3cb6264191ca73d7fe12eb67f573df4cda957cf0

  • SHA256

    27a0b8f620f42d0b06f3ce4110ca9ed57b7458b087bafbfaf9a67885c48fbbd4

  • SHA512

    930aa68813c6e9036b3bda5b1b4c231bf5bc0d041abc243dc81262514dfcb80343ff07bbc839e2f3548fd39e4bc767808de4f58db7abde36cc3015802237a1cb

  • SSDEEP

    1536:6yJO8yNUZhWFSccnkgD6R845C1vIrnU5t3Fji1Vsdbso6zDmY:/J7yNChWBgDr4kQnQ16sVsocDm

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f526a24a6b64fe5b1497c28590e55062_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections