General

  • Target

    02f62b4e17abf7a95be42a48e9f1aad2_JaffaCakes118

  • Size

    89KB

  • MD5

    02f62b4e17abf7a95be42a48e9f1aad2

  • SHA1

    268c70e7e1e349811376005bc3123222f28ac6dd

  • SHA256

    1dbfae635c447d8551d985116f3bbc74b428e698843ae0d101f103ef9d314d34

  • SHA512

    59fedc75d161fbdf1f2e22b90fa19bd9dd7cf8e8d755d979221fe034093bdfdd2717feb02a1c4ff1a4696abc16b198e665b295cb1e63c634804e2febe1c2040f

  • SSDEEP

    1536:+6c2bcATlbcKNyRAO40gqQGYPLVIL+ajrOTF4MVpAb+PVzqDpJ5+1IyNgIG+xVpe:+kI0tvwrtQvPh7ajrOTGg0YKJ5Ug3+x+

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 02f62b4e17abf7a95be42a48e9f1aad2_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections