General

  • Target

    3a7e8274e3de28d6fc1eedb37f81fb19_JaffaCakes118

  • Size

    237KB

  • MD5

    3a7e8274e3de28d6fc1eedb37f81fb19

  • SHA1

    a2a2e697a25259bc8cc486761bd86597214537b8

  • SHA256

    e590dbf56bf41e00d765be71479289717aa1a50d1f6fad76fd47b3d11df6c64a

  • SHA512

    25a5bea010bafe9db9342db4123fe540018d994d851d508bf950ea014e974addd98e3eb471ea0a656fcb67d67e054894b1b044948acd0881251800d8527b2a6d

  • SSDEEP

    6144:ID/hMJCeHCP+7+MkgYN6d6bTr8bDBIF1QnyWIbDH7wutT:ID5MJCeHikfZYN6dUeDebcyWCDU+T

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a7e8274e3de28d6fc1eedb37f81fb19_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections