General

  • Target

    28aeec32f693b8d69994a613a63cbec6_JaffaCakes118

  • Size

    311KB

  • MD5

    28aeec32f693b8d69994a613a63cbec6

  • SHA1

    4e7319cecceccbbb0a36d0421d0e9e9de1cef0c2

  • SHA256

    047faf1a9a61acbf5cf636b6690c247e0a0d816c564b23e1ce675307730270f8

  • SHA512

    8743269b6c6a62e1e3331c469f6ad416096c3043257b7b95a439c26992ee1cc7d942b5ba469484cc1ab9d28c4847c8439a641737672ded37dc7926806b76cc12

  • SSDEEP

    6144:Xd1XTTnQI9FBG5mm4DlACuQ5qi/8FMT3vX/c/L0HonGPNvLMTDIIr:tlbd9FwmztEs3vvcixIIIr

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 28aeec32f693b8d69994a613a63cbec6_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections