General

  • Target

    01b4485eb79ff1bc56d980371ae86243_JaffaCakes118

  • Size

    86KB

  • MD5

    01b4485eb79ff1bc56d980371ae86243

  • SHA1

    f82d14117e9fd3682291ec54bb2b75923d973a27

  • SHA256

    1c9a0de4929d051671be4e36bd87b55cdb741336fa48e5cc7f612dbe50f62478

  • SHA512

    21a77f09a300690e0b35bc5df0d7a2cbcc8a2f969a6950b7d93a0b015b96e00c112a9a017350bc1ee204c677cf3b7aa5d8557046cda4e9fa10a6cefd09a4dea9

  • SSDEEP

    1536:jrrAQT0nbCfeqmBzmAeLtvCzn0kv8981knA8kLnKT9mzpA+WCyI:jrrAQTQCrKliYn0B81kA8WKT9mlLWCyI

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 01b4485eb79ff1bc56d980371ae86243_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections