General

  • Target

    2e5f324d684ed8b347ba7dad63650cd8_JaffaCakes118

  • Size

    535KB

  • MD5

    2e5f324d684ed8b347ba7dad63650cd8

  • SHA1

    cb88edf191eb597c3ecc80cf7c61a3e85a6132f1

  • SHA256

    3117e30c08eae8f09b6123d2764dddef61ea1c33f0a1fd3ae82e4f8917e5ef79

  • SHA512

    994e862942627c037b84511f5c0961d58775f455c545ee5fd6ea5911056db3f2cf938a4140cb43bde96568c5151015b570e5b39de28179d6998b8cc10013d33f

  • SSDEEP

    12288:kEPaTq/NIjxXKGIrTiPritiMH0dwBqU8V3Hegrt8wst2nlKrG:v2q/NGxxiGOtiCXBqU8JRsEcrG

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e5f324d684ed8b347ba7dad63650cd8_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections