General

  • Target

    2bc5abc1d2d8a1848f1eb7b1c6bac069_JaffaCakes118

  • Size

    56KB

  • MD5

    2bc5abc1d2d8a1848f1eb7b1c6bac069

  • SHA1

    416004d66f1da2baa1e6be3ad7e4df2a6a44a4b6

  • SHA256

    2663186f5c418da002a691e445d3f80029511767fc8187ae70910f6a8ede292d

  • SHA512

    5eadff13bcc8da47f325985f9dd06154c0cfe90c7743efbff9b15981be03af400b95ad36149a5af79e46bafc177be3dd1eab5db55d19c4d5ca4a02aea165a8f5

  • SSDEEP

    1536:uZLQSpl82Sk8+cb2QkTO5hInL8naGouGV6i/6c0Sk3FrG:eLAdhbuTOnILqaGoDVl6c3kVrG

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2bc5abc1d2d8a1848f1eb7b1c6bac069_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections