General

  • Target

    0eba9d232a5fe36652c5c01e50e8684d_JaffaCakes118

  • Size

    107KB

  • MD5

    0eba9d232a5fe36652c5c01e50e8684d

  • SHA1

    1fe8c1a9bb01ec368c16ebf96ee12e41ec01a3fa

  • SHA256

    8d53c6d4750396c5840e21b353d88ac67db961d8f793197b90b7eb908a055a46

  • SHA512

    955ac7145ef68bc08516fa3831ff6ac9edf484685407427f4a870ef5fc45a860a15c44bbd06b3293d064f65f6b5cf1afe64d116862f6c872fe95d775d1e5b606

  • SSDEEP

    3072:Tv4+A9zDs/9KYKgE5/BQn3XY5uJ8rltcBUqe:ToE/93E2XYEJ8zcBU/

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0eba9d232a5fe36652c5c01e50e8684d_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections