General

  • Target

    4802ba51c8b2983e7ef20a82db6111e8_JaffaCakes118

  • Size

    519KB

  • MD5

    4802ba51c8b2983e7ef20a82db6111e8

  • SHA1

    ed77163601d2197fde1e801d7b5b84f973749369

  • SHA256

    b55ff067b12fe5ac87ada51e1df0abd677f007d88940f1f52608a1ece322a3aa

  • SHA512

    79e931cd966082918ae885d87fea47098d2e3cbed9ef74a63f462ef4c45d6fbd35b0245a92cf12587f64cd3504afc188afb8c9556833ea701288978b94f7c633

  • SSDEEP

    12288:oq0bvmv9T+mI9aW437csIstroy4pznC+swAMosfiaCTPd:oq0zQ9ynGistLUnCWPvaaCDd

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4802ba51c8b2983e7ef20a82db6111e8_JaffaCakes118
    .rar
  • SAMPFUNCS.asi
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections