General

  • Target

    2bd22c0a2cd3d38dc8cf4dde25fd7d59_JaffaCakes118

  • Size

    86KB

  • MD5

    2bd22c0a2cd3d38dc8cf4dde25fd7d59

  • SHA1

    3ee236671394709f3ee8c27eda7ee3d9351c505c

  • SHA256

    301e14dc540fc8a150d1a87ed2dc6e376e7f29c84b29cc21c24669efc4bdf514

  • SHA512

    ae67b30e48edc8e10cc4fa4fcb2566f49c81b025f0f5c51cc27cd2c0929d45f8ede7346090b6d4cddb626e2598a139b68b999e5f39207690309ddd5482dbd34d

  • SSDEEP

    1536:IYvynn+A2VIKZYXhp901HJGlcjb6IvOMPS+j9oFliVthj5RPcV+KYAqDnk04Gxdl:1v4+AdKWXhpi70sGI5SkoFlEh9tcVzYx

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2bd22c0a2cd3d38dc8cf4dde25fd7d59_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections