General

  • Target

    29ae3e1c21dc7dc0ba41c3f3a5534e78_JaffaCakes118

  • Size

    126KB

  • MD5

    29ae3e1c21dc7dc0ba41c3f3a5534e78

  • SHA1

    357d424d6b84d875608eb33d8d19b0cffc1ca73f

  • SHA256

    13307ce663c8d16c96de6129576480a99a741e0282f741b1e0e9530b76704158

  • SHA512

    4af3d163c21d42ec2c83d48b5d7dcef60e3cbc80553c85d6465ef8fc8092339045585a3a29ccc22dd2db095eeffb85146a8819fa0553c2e99e9c883b7537a403

  • SSDEEP

    3072:RS5WU1bUMSEd61GND6AZOHQ9Xx3zirk7iwGPy6g+mSRb:RALb1682ACQ9Rzir31y6fme

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 29ae3e1c21dc7dc0ba41c3f3a5534e78_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections