General

  • Target

    0394e701664595d681077baf2a0476d2_JaffaCakes118

  • Size

    81KB

  • MD5

    0394e701664595d681077baf2a0476d2

  • SHA1

    c4cf0d59d537c39d43ee4cc65468818d9cec2aea

  • SHA256

    d6fe3be65c37d6363bf2d055a509f55571d2ebae3014e622f210398c75e04f3a

  • SHA512

    795e490d1ac77d23ce181bde3b904b7f2c9d16097f068ccc5a55a46feef6f1219f01b9abc5b31c0ae597ea2929a5a11b9c9f9e946b3a2fa98925594b29537f39

  • SSDEEP

    1536:LhEvJaKDHBKxsmRm/lM76FVeqYOZMiQxxODSfsSmmhZ88j2E236MVqlbiq1sk:lENHoxsim/ldeRPxMDSfsSXhnj2EDMVz

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0394e701664595d681077baf2a0476d2_JaffaCakes118
    .dll regsvr32 windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections