General

  • Target

    4815c91e5dfce2956aba2d1bf311799d_JaffaCakes118

  • Size

    86KB

  • MD5

    4815c91e5dfce2956aba2d1bf311799d

  • SHA1

    ef9aaeb65afab72b6c6fb4af446b92d3c221bf68

  • SHA256

    1d4448651a00ef4c45a89ef16a301deb4d4c6845f7276b29cdb1dc63fd2761c8

  • SHA512

    c76151161d12d3e482a7c7b0d7e0af4c50d558b230ced0bd09d13d14936dcf7f9ad7b27f3165d5c34a4a41b7d907297e14a4fcad06d61ef65cd72fb24c013080

  • SSDEEP

    1536:krrAQT0nbCfeqmBzmAeLtvKDlTrlIOCZXb5hUt8RXtUtx:krrAQTQCrKliQljCNbO8dGtx

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4815c91e5dfce2956aba2d1bf311799d_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections