General

  • Target

    32b020aa1cb6c9b42b671ea6c4dc2c0a_JaffaCakes118

  • Size

    709KB

  • MD5

    32b020aa1cb6c9b42b671ea6c4dc2c0a

  • SHA1

    40a0dc87c1939d711c95e0bad2655fe6f069382e

  • SHA256

    c8f6540803f912240c333d6621f416babe0764f42e0c72a83c978214c156c003

  • SHA512

    032efa8b68d9549480f6c78a59bbcc2cafb8419650ba1e6a85347903fcb1cc591b9e8b441ef4c5591fb8e438b936f2560d46c14f27c3add2bc05c7276c110d4b

  • SSDEEP

    12288:xeipb8AZzl4OMQtzhZneQAOl3QU6ezimeHimpUglCz18RuHuOMBm7X+k+VmJ0vUz:xhrz4uRnjAO1C6imeHiifQAauOMBUXhd

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 32b020aa1cb6c9b42b671ea6c4dc2c0a_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections