General

  • Target

    16601ef5ffbc16f6c5c17dcb5484c21e_JaffaCakes118

  • Size

    79KB

  • MD5

    16601ef5ffbc16f6c5c17dcb5484c21e

  • SHA1

    c3d5827a1f0e8db9ec298eacd2f035af7e11f3fe

  • SHA256

    ab48f6f23ee40863b6cec7399b00605e119be5600274cef1ec28435e2817f4b8

  • SHA512

    5d08ad8d18f4649992c6aa3fca4b8e35f447c9995ba53c8a4c80d6efffccbd31df265747e7ea87b6483842fa991c0af45bdd4314f0b5310afd199ce52eca324b

  • SSDEEP

    1536:y99TSsDDaFCwAUu3Z6/VXBLDNkSzErJc2xLt56hgAUMHgG7awvp+ID3wyVwe:y9AsWtAUyo/RBLorm2xLt56hlXgAEyVP

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 16601ef5ffbc16f6c5c17dcb5484c21e_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections