General

  • Target

    0f201b9c6cb399e7d50824d20fca2f32_JaffaCakes118

  • Size

    70KB

  • MD5

    0f201b9c6cb399e7d50824d20fca2f32

  • SHA1

    bf1d2b0146991cf4c7dff7e8c4363ac759f2094a

  • SHA256

    889ec431d0e58cc3be186975cd5683a1c39b0cc12a07553ac3a963ca7d518cc2

  • SHA512

    e82d466e8326f159c3c498952b9762925763eb4528bdf924b182c7ed2c70785444c68fe11eb443c997adedbcf4896c2590bb9f55ec5203302005a1848db207b9

  • SSDEEP

    1536:ZXLwtq0c49MKioFjSz1UFLE/dW5MMbKl89h9LMTlp/8zWqlLqw7t1FVSr77Gnoug:ZXLwt/FiaU1Uq/dWFbNr8azD7VS372oH

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f201b9c6cb399e7d50824d20fca2f32_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections