General

  • Target

    0306ea671d96930b4e9f32c5c039cecf_JaffaCakes118

  • Size

    48KB

  • MD5

    0306ea671d96930b4e9f32c5c039cecf

  • SHA1

    0c72a92a93d4aa4fe4210cab3bad32c6176db251

  • SHA256

    8194268a960da34de6adb34b9ce7cd394add78dd77ea77b7dfedc6b314adf93e

  • SHA512

    adbf1ad955cb39f461b1febd8d7d6b66ed779ae4664b4870a7087d10f8b437c70951da3a37b3e203b43c190f352299cd5195d0b23fa5fea37acbea9fc1165da7

  • SSDEEP

    768:1zpu2IlDYJY6KiJ2bbwMcdPpmPZuVjnlGtdiCZoVKct5jK9s/YlD:1zp+6Gbb7cdhmgVDItdiCq9alD

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0306ea671d96930b4e9f32c5c039cecf_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections