General

  • Target

    3e52f8f7adfa80f3f469374b7eba6c26_JaffaCakes118

  • Size

    93KB

  • MD5

    3e52f8f7adfa80f3f469374b7eba6c26

  • SHA1

    04f5020e012e5700f2e791ef9b27385d28fff818

  • SHA256

    3978f2d68aa70f4f2b8dc26521ba4cfa1373edaf6ce899550bbb5b4cece585b3

  • SHA512

    ef5c2e94bebe124c4aa618917571c8ec830291632d275aaa0389efe641c0e81bacca75e9e619527c5cde43010a59037f81f7fa8a5703e894a560b9aecd4e8059

  • SSDEEP

    1536:exPER+q9G6zjWN/DboMYnPvjbfA+EjMOBAS6fD9TpJ+SoBTrU3U/U:45UWN/D0HvfbyBAS6xpJoBTcUU

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e52f8f7adfa80f3f469374b7eba6c26_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections