General

  • Target

    2dbfdecaa414f39e1980008b8c903e3c_JaffaCakes118

  • Size

    19KB

  • MD5

    2dbfdecaa414f39e1980008b8c903e3c

  • SHA1

    bf0f13e4e01dac8c7d1941f7fc45c6b0745b665d

  • SHA256

    f52a0ac6e2e876a589649c82b26fb9a6b484f318f84b7a2a7f6ceca47501ba95

  • SHA512

    36609e04631eb83125333a0789f57353fc7842d39557add7c8e5ab2c1bf2cff5ee526c50f9797371f1941e2098b2d400fbd5d402186b3616a9291ec226adf0d9

  • SSDEEP

    384:1Yg1V9xkI4XNO2bAJTH6XGGdt9czPFf9aezf522MmKLnt4/psPI6SPnG41tS:l1VzB+JbuHlGdt9cznaezR2Zt4/p0HSQ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2dbfdecaa414f39e1980008b8c903e3c_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections