General

  • Target

    3f53b1d51048121729a5ee96434edba3_JaffaCakes118

  • Size

    24KB

  • MD5

    3f53b1d51048121729a5ee96434edba3

  • SHA1

    fadb6fd16bef8cc2dd61f9b7d491bb32202c1e1c

  • SHA256

    baf2d89019bdef20d49329e5bc303decb9652579c2478d0c60e5948dc2defc6e

  • SHA512

    351702385c47e21c36ac8d99ac4008f01374d5511ecc76ae305feafcd1e07fda0e5eda8435657e966726d7b4a5f3febf7dd3f36e432b87e9c628dec29e8c67b2

  • SSDEEP

    384:Mis25nXSeecHOb4YGoF9KXiZSgm3m8pxJXQtfjhZVRbfigQ0n4jURrSj9k/9PJB0:ds2p3HHYN9S6Sy8TGFbQ0nzrO9kjRgN

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3f53b1d51048121729a5ee96434edba3_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll .js windows:4 windows x86 arch:x86 polyglot


    Headers

    Sections