General

  • Target

    37a8851394a5ab7cb69c7d309a9205fd_JaffaCakes118

  • Size

    197KB

  • MD5

    37a8851394a5ab7cb69c7d309a9205fd

  • SHA1

    875d57b88f3589e5f92806f13181539e131140bc

  • SHA256

    a13b4e26fc632be1ac84389c036f79097cbb6e10eab1dcb4a15334425282edd4

  • SHA512

    e4bc666889829cdc812cac9dc439f9e04e52cb50156303023e591c2bc1d37f9ebfb62a1bd29917a74be793f7e1f751406bef6f82430af96b18c38d58571f3fd4

  • SSDEEP

    3072:XaZFRfcYHnju15P9BZjVoCy2IhPUaX3BPcTzqMI9bC7OKbFNtzPOnQCO0nTLG:ObVjuXP3ZjVBIhp3BWz/2Khvx0Tq

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 37a8851394a5ab7cb69c7d309a9205fd_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections