General

  • Target

    1ba9ecf43acf26ae68a6619baced2564_JaffaCakes118

  • Size

    86KB

  • MD5

    1ba9ecf43acf26ae68a6619baced2564

  • SHA1

    b29ab978498f5ebd4924568876c612a1abd81905

  • SHA256

    de9d47a7fbb2ee2509d401064a006596a74d1fd59801fb3c6179c09dd3ef0830

  • SHA512

    b80839cfa05f940e49cc8d089190fa812fc4d7a05ee5c458062c402c3642a9f2b9e510545084b89d53403ee605809e6172387bb63a66f53f8828124d0820994d

  • SSDEEP

    1536:trrAQT0nbmD9KSZ6OAEEl9rzAhqbryM1Nu8WF4FQpV0dSMLnKIyc3fwXm/EO0G:trrAQTQSKSZ6Sar8EHFN/Qp+XnK1c3LB

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1ba9ecf43acf26ae68a6619baced2564_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections