General

  • Target

    06b83b228cc62158c8f171fa4fd1ff49_JaffaCakes118

  • Size

    55KB

  • MD5

    06b83b228cc62158c8f171fa4fd1ff49

  • SHA1

    7d458338227fd43a4aa656278ff179e4bb9762c9

  • SHA256

    9e9e1c1c7d01bfd9ce69afc2bca6b9467a1bb9db6f4bd4ba778edcd9c727c807

  • SHA512

    090fcd1ec53f7bba1b5517f4daa77030d988271207898d351e0e5d73c2de26b1f3d9606a2c7e88e77b9d740b33494d69c432577b08f698bb37db74c3f75079bc

  • SSDEEP

    768:MQeLMfwbady3NOJKupCAr1QkpmgD1WVUoifEM+xr/OIhb4MLHoS2fMh4apF0:MQvwbCqABD1vdDgh2eqIhc0lOM2apF

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 06b83b228cc62158c8f171fa4fd1ff49_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections