General

  • Target

    291a3b03d4b077c557d4de89f1867e92_JaffaCakes118

  • Size

    329KB

  • MD5

    291a3b03d4b077c557d4de89f1867e92

  • SHA1

    d7d46cccdaf88a7d4eef0d68d3e1a28b4cb771dd

  • SHA256

    642249a07ca13a7fd8dba5899c4f5235e39856833491908085ebbc0c9f29e89b

  • SHA512

    ad367eb9776cd04c08dfb124d49a4d0332d9825eb0a311467470b438a1ea981a7f408a32b15b8cc97b955819269a1cb18b1d0af19551dbd04f95644418beb407

  • SSDEEP

    6144:lxkG+jxZw1bssYKdjRJdXQjY5D5XEDOpzUcBQHxRjwU9BhZa5RyTE2mCNgX9ODp:lxkVHsYKRRJNCYkDQyRRjwUrazywfbXM

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 291a3b03d4b077c557d4de89f1867e92_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections