General

  • Target

    24f2c5d07c90fd6191bf09ddf5acf40c_JaffaCakes118

  • Size

    664KB

  • MD5

    24f2c5d07c90fd6191bf09ddf5acf40c

  • SHA1

    3798ca8cb2db7a604c13dc487cc24c4e1e57511d

  • SHA256

    60f0babc8bb19374e52fe31b4024d073189aee9c9db5f9842f4ce09ab24da1ee

  • SHA512

    496ca7d45f8aab4271e64e9a697bb7096658726ef0337effe43c90b49555f6ab76ccf9efb32e67f20fec9e52b2e77dc7d1eb80545604e5cc4e37fee7f3f93606

  • SSDEEP

    12288:sBkSl0k4VECoQ8Psqos99ZqP0jQBlISAzRw7p6fh4V+cQb/N/YuS6SN6Bfa:mkWQfodXZR0BlIR6p6f6slYB6SN6Bf

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 24f2c5d07c90fd6191bf09ddf5acf40c_JaffaCakes118
    .dll regsvr32 windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections