General

  • Target

    1867e49f177df4866e3c00c761fa8562_JaffaCakes118

  • Size

    770KB

  • MD5

    1867e49f177df4866e3c00c761fa8562

  • SHA1

    1bf91c0ad57252356cf97888404f7e9ed24e838b

  • SHA256

    f9c98f55d7cf28a32b0be0b559094a1d60bdf289906af0ba3e138c3de2727527

  • SHA512

    d9589b6972b745ef5a9686ffddd7401090655a8d2b73b488249ee3f208708670b958ef80f27c64f22f2970054543ccd3181a6d30135a5fb86f9e2feca615d1d4

  • SSDEEP

    12288:EAbig80z3gAoE/k+M+nlYDddEhmwtezj5HToRPMm7DUys7Adq+2cAd5cTVaR:LbT8s3g9t+nlyY5u5THZys0Y+xAdGaR

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 1867e49f177df4866e3c00c761fa8562_JaffaCakes118
    .zip
  • SggMMt.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • smtiestarter.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • smtuninst.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections