General

  • Target

    41ea6fa083b4ab8778b3eb3ed8d32941_JaffaCakes118

  • Size

    566KB

  • MD5

    41ea6fa083b4ab8778b3eb3ed8d32941

  • SHA1

    a83d1a18f26a3d5b04d88cd328c8affdda15e9ea

  • SHA256

    47225ac2e01d214f073d659e7996851b26ecb6c7a0a485ccabd96a93b717e372

  • SHA512

    ae6989ca1e39a3e1802b51217eb049bcb9e6796a4d9a751d096801cc3a17e33693b03b7288b2c28bfcf6b8404c4f301e3e7746ba6117d3ce269af276182f41d6

  • SSDEEP

    12288:vDYqj0vsx1Y3FdSnSjH+l8b5ZIbMoqs9yNtkpQaTTtQtQTiodtk3UpGXZ:v0qoveKFbjA8b5qifGvTtQtQ/tk3C

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 41ea6fa083b4ab8778b3eb3ed8d32941_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections