General

  • Target

    0fec1865af0eb910bf3f78e7d278a059_JaffaCakes118

  • Size

    90KB

  • MD5

    0fec1865af0eb910bf3f78e7d278a059

  • SHA1

    53092e6bd8cfae69d0db2d6b0dfa089d5a43d1d3

  • SHA256

    8a7c524a118c5dea601d0b35f86a12df333c7af329b9b9584bf1994b28088446

  • SHA512

    0fdd00d46a299029686f9f2ca3e94d32f3905400b55bab5f3c64767b31be6b2730489390f3bb2f85e76226592864c7575e8827e4defc0dc1d5d62cf038bb8417

  • SSDEEP

    1536:UH+rCSzfL3iKMbu3H0mvnjbXhT5B5h8ldMUt0mLUaP0FYVRzVIP7C8WXP:UehzzSVe0ujbR5rhaIqV3Iu8u

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0fec1865af0eb910bf3f78e7d278a059_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections