General

  • Target

    0fbae5b3d1750907fe7ef69a58ff9f8f_JaffaCakes118

  • Size

    32KB

  • MD5

    0fbae5b3d1750907fe7ef69a58ff9f8f

  • SHA1

    2bff80cea90115f6fd96487dd0b4c41a15d63187

  • SHA256

    723e613c7f65979f9bdc3dda828a1969924978689631f7525c5f27b3032dae4b

  • SHA512

    9491f51460af9d65444ff5e745ec5f7bc228eab7c26d1655f81cda5dbd17de8ccf4f2dadfe169c55b03221ef2d26d3d40acbc6d27a1c11ce8863c44c4d8acae3

  • SSDEEP

    768:W6rnBGayIbnTPVnUNWYoAhv12cr3G0x/t5qJ:QayIbnTqNyEv12ORS

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0fbae5b3d1750907fe7ef69a58ff9f8f_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections