General

  • Target

    f959db4b7b59561dce7b88405f1a5d49_JaffaCakes118

  • Size

    43KB

  • MD5

    f959db4b7b59561dce7b88405f1a5d49

  • SHA1

    a2639dae68fac5c63c4d26737d4ec36ce7525cf5

  • SHA256

    9c194edaf82126d56df865db45a28c9c499e11495995a20e1b5606bccb2fdd23

  • SHA512

    7d27279dbbb2e49f1c7eaad168a2f1116da5948704e9f959ae83a20c00f8547ef3f30ea56f62408775d973eb7f0ca87f78d80102a8365e3d370404969dc7cac3

  • SSDEEP

    768:caemdWdopKk6UT10FqcRK8mgKElZhlnADo9x5IekIGMG0fdvYt+0/Vuk6j/Iy:VeuKl+10F+8mpEl1Amx5ITMG0fE/Vuka

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f959db4b7b59561dce7b88405f1a5d49_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections