General

  • Target

    038e1051fcc795958c14829368601d32_JaffaCakes118

  • Size

    100KB

  • MD5

    038e1051fcc795958c14829368601d32

  • SHA1

    a37a1cd5a892f2542c37899f7b8fba5354cb3375

  • SHA256

    dafe6e4dea32b2944000f99503414c2678128c2326df3b3f240c54cb5d8e7315

  • SHA512

    543df9fa530567d6d475d270ddc2b11782b9e4b0b0b3baccf7b0dd70046780ab54d74391b3484e1f39d9f9349f4b2aa57a15c89d4dedc8697f49fc7da46f343e

  • SSDEEP

    1536:QYvynn+A2VyLIyZkbGma0/sJ506SGMi0k9BAobmsoosZwNQGIqe8DBmz3m0h4lCJ:dv4+AhIiC/w5b5MRkFO35Gxe89UsCJ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 038e1051fcc795958c14829368601d32_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections