General

  • Target

    4b5add836aeec40a7eef6d84a24c5c31_JaffaCakes118

  • Size

    328KB

  • MD5

    4b5add836aeec40a7eef6d84a24c5c31

  • SHA1

    32221d0b3113ee82d0697c34d1bd3e291dba34c5

  • SHA256

    e46874eb9b6cb067d34918b570edefdb8085d03859e0b9c5fa67a9aaea08051c

  • SHA512

    a0100f28f299d17d5d4a2c1e3082aa1d92ce2a8960c30105c8291a58929900bd9217cfe47f2d60d035009d2e6bf0427029f1122eed8076268c519f20381a4572

  • SSDEEP

    6144:ZhYsqDrj8jSzvYHUdfP/azLmFt0xsHxtIVOVi2j7tWFCJTeaPm2TZWyrLwaDhX5l:ZCsqDP8jS993gaSGbIRW7toSeau2TZXI

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b5add836aeec40a7eef6d84a24c5c31_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections