General

  • Target

    3d70a6a33cf8364eabd4cd17c18f67ff_JaffaCakes118

  • Size

    219KB

  • MD5

    3d70a6a33cf8364eabd4cd17c18f67ff

  • SHA1

    a13d3f7184795edade1ba5a225a4d5e71962cc4a

  • SHA256

    ba69246bcd21b3c1d9576f42871578ab6565cfb290df04d84f2c9620df2d7af9

  • SHA512

    dd6b445b8f88f2dc38831505dda480066fb4d1dc8661a0b5f78871992f2a563a56e91f3b6872a4198b5a388a21a674d55715c1c6a65eeffbf11fc40fe9502143

  • SSDEEP

    3072:IPbduzHFuZhWwZosK2Vpqi7NmUBvDw+KDFHI6s6iIVDOm1JhyhZxpPR1T:gQD8LnZ9Vp3nVmDFCmnYxz1

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d70a6a33cf8364eabd4cd17c18f67ff_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections