General

  • Target

    08fdbfb975f8156dfd916f849ba6add3_JaffaCakes118

  • Size

    68KB

  • MD5

    08fdbfb975f8156dfd916f849ba6add3

  • SHA1

    91c49e409ee3f12d9d14402522b84e1979587407

  • SHA256

    d10844f76f7ea28daf5109905413a9a23f3a0bf0b3c3f7af2c16862008c53f68

  • SHA512

    f6456ffc1d94c13e1bf02b1ad135aeb88591f527af909aa113ea5096c45ba9d6a6bbdc7ced57494753d48aa3a4948145adadc4bb25c419319ad7684130d11bb3

  • SSDEEP

    1536:hyZgUFAg1iGWR+msL7XPtdXFqwRow212urhhfj3DzTEMYlJgBN:XgjLxBFODhrnT1Y/kN

Score
8/10

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 08fdbfb975f8156dfd916f849ba6add3_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections