General

  • Target

    3fe24f98baad79d2473dbba867bfcfeb_JaffaCakes118

  • Size

    118KB

  • MD5

    3fe24f98baad79d2473dbba867bfcfeb

  • SHA1

    4d1058495c98a2dd63806115c3cdf21fa2f6e292

  • SHA256

    853b3196b250b8bb3e133c814c593e1642c2156b7a06d958957e61e075e5cac4

  • SHA512

    4688c0e85f6f406fb2f0ea73bb71a8eca5d43987038650c8fb92e74a75479f7bbac868eeffde2ce5334dcae051c3bce817737feb3bdd245a9e061f6163aa8f9c

  • SSDEEP

    3072:BXSQlsC7E8Ym8TBUyC8Kh6KP+FWRHMGOLK8IRD:hFlvEHmMGy3KhTJRsGOpIRD

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3fe24f98baad79d2473dbba867bfcfeb_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections