General

  • Target

    a9a266f5e680e640c20cfdbe0684362a_JaffaCakes118

  • Size

    3.5MB

  • MD5

    a9a266f5e680e640c20cfdbe0684362a

  • SHA1

    c812b8a43ee95abe01f8d6fff9f11e50d9d4a5aa

  • SHA256

    38aac23a23dcbdb50b2409d32ef0f18d2df852a70093412e6b83816f3c3de1f0

  • SHA512

    f581efdbfb96a90d28ecda0a43ed6df4ad7f57f85434715cc30e9117108bbbb287ac4bfd38e5b20deacde87201d79a80d6fe4af6fab0f478e7e6c804b5ab03da

  • SSDEEP

    98304:8dO8uWMJDnI8/pfDyLOM7zYHoSBbLCUODzx6yvHIkQBxFFjALkRgp:8mDnPxfAQHvmxF68HI1B+9

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a9a266f5e680e640c20cfdbe0684362a_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections