General

  • Target

    fd4e2b46a3569c040939d4c16da85f36_JaffaCakes118

  • Size

    322KB

  • MD5

    fd4e2b46a3569c040939d4c16da85f36

  • SHA1

    48ea35e40b6356fc39fca21c5a405f68b584a006

  • SHA256

    eb49a857864c3a6698a6f13f11a67dac72068baf83725a1fcc618d136d826847

  • SHA512

    e8a6108803ce7b3d1210040a2762d811959d1b242f55e8fe86b5c575b25433592f4147b93e195d44cd3845966275b65db2eb491f36322e9d21de85958cb74e61

  • SSDEEP

    6144:ez0EvoRl27g+C0jdqzawjIVyVX4Y8Sg8Gd5K7/5t8tV6CuX4y/eqLdph2jWlRBC+:e4moRl10Nw8MVB8T9d5Kr5t8z6CA4y/J

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fd4e2b46a3569c040939d4c16da85f36_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections