General

  • Target

    5c91d1540aff7edaa8fb0c06096456d9_JaffaCakes118

  • Size

    303KB

  • MD5

    5c91d1540aff7edaa8fb0c06096456d9

  • SHA1

    229f460637d47fc3a09fcbefb07a5d3916fe885a

  • SHA256

    0c4d4118921b4a0bf76bcd1f0ddac4c00cf48be4546de0feeee73629ed69841b

  • SHA512

    e99f0645a00def7f82c93068b5dd827ba9bfe700532d159c144a98f5805cf2bb94b48a00667766371daa502f0abbb8f5c72c64c4d3bef9b14be17ed38322213b

  • SSDEEP

    6144:hY1ZN6sfi5Me+vRuvIMFIWqGW555uMtSTSJHfm0Nu4588AZ5QF3IQaDfZtcTWeMj:hY1Z25+Z0IdGmrtSTSxT88AZKBaDRtc+

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 5c91d1540aff7edaa8fb0c06096456d9_JaffaCakes118
    .rar
  • Nestopia/Nestopia/7zxa.dll
    .dll windows:4 windows x86 arch:x86

    dd1fcfec6ca1a2b0bfb46d7f425f87a4


    Headers

    Imports

    Exports

    Sections

  • Nestopia/Nestopia/changelog.txt
  • Nestopia/Nestopia/copying.txt
  • Nestopia/Nestopia/kailleraclient.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Nestopia/Nestopia/language/english.nlg
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections