General

  • Target

    f6e38c52c18f1b8f2c6a0122be5c8630_JaffaCakes118

  • Size

    336KB

  • MD5

    f6e38c52c18f1b8f2c6a0122be5c8630

  • SHA1

    2853fba984b833d747174baa6c38163e65eea2d7

  • SHA256

    6663fa7b38e89dd79c937e288b9416a0a0a323daf8e7d095b1593958c6f04668

  • SHA512

    c1af4df400bcb9f0e46fe807256b38f7f236ade6817cd1f1db4ed4f3cfc335b4c5176b7ae3bfb2fc1e12f204d3ae9662e156a27b90f63ada8a597d2b5eb33800

  • SSDEEP

    6144:AxkG+jxZw1bssYKdjRJdXQjY5D5XEDOpzUcBQHxRjwU9hhZa5RyTE2m3CYtNr:AxkVHsYKRRJNCYkDQyRRjwULazywfRNr

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f6e38c52c18f1b8f2c6a0122be5c8630_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections