General

  • Target

    1570fb3543d651b6e2b4387fe23fb353_JaffaCakes118

  • Size

    167KB

  • MD5

    1570fb3543d651b6e2b4387fe23fb353

  • SHA1

    55d1a0b5d92af0369e580af2e9fe228d9d264b62

  • SHA256

    da4369f6040aff5030b7bbfc875d43bf218a1eecb35ba6d30ee1eb4c06e65630

  • SHA512

    2465c4140fd6909e46bb0a9a23c0f02b07aa394008fa75cf580562ccec89710ec3f1a5b6c13e2ad4268ad2c4b94c81f27afcdf72373af51ac18ade72d9ae6e04

  • SSDEEP

    3072:Plhr8G5T+O3aB3GqpbzKupGYoIBoz537xg/7FJW/0iDsx1gXfie:bf56OKBGqpbxUjem36/5qw1gXX

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 1570fb3543d651b6e2b4387fe23fb353_JaffaCakes118
    .rar
  • Read Me.txt
  • cvars.ini
  • scalen.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • scalen.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • screenshot.JPG
    .jpg
  • settings.cfg