General

  • Target

    0d12e0e8187e60c9dadd36a0367dfab6_JaffaCakes118

  • Size

    317KB

  • MD5

    0d12e0e8187e60c9dadd36a0367dfab6

  • SHA1

    7989ace459cb9458531c8f7a34f9cf06eb642c77

  • SHA256

    c9bd98db5aee15fc6ab67da07b1d2f1a6c0d43a6880a2cc8f41a19b4212a40e5

  • SHA512

    ad0ed9c80d1c1f951b5ba0a3dd69a10a400b7020e7ff6bbe36613421ebeaf9cfd938cd22178928cba42eb85515e52880ff39d8edec7c9f1b53d9a14580246243

  • SSDEEP

    6144:Q7OXDgT2MG2/+x122AAbG2mTCd0XqP03Ioq53kr3nCDJ2rNpN:GOXDgT2Mbm6T4mT80l5q532CDeN

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d12e0e8187e60c9dadd36a0367dfab6_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections