General

  • Target

    46e8068cd364f08c79910b9cc16a4468_JaffaCakes118

  • Size

    43KB

  • MD5

    46e8068cd364f08c79910b9cc16a4468

  • SHA1

    f10f1e176d9ec3107a0d05b8a5a8053b01b62c6f

  • SHA256

    63b8d57f8063f0fb2c0910668fab00d51919cda2ff96b10974860ff24f8d5da5

  • SHA512

    036dd516609326a6cb7e673b81a16592ef653c7043c7da5eef323119d936672ef9a96fe876a76c676f4aeb6a01074f97968d8898d9b7ac4e771a84fd993214db

  • SSDEEP

    768:imq1j1r8loHugcMDHPT1Zz7EAJXks0fjXF0g8iGs+Q5VX:/cr9OMhh7EAJuuiv3j

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 46e8068cd364f08c79910b9cc16a4468_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections