General

  • Target

    4cdb9f59e0622074f10c12bfb1cf290d_JaffaCakes118

  • Size

    182KB

  • MD5

    4cdb9f59e0622074f10c12bfb1cf290d

  • SHA1

    42f33e98da2d26679bc69f0c06bc7f362636ab13

  • SHA256

    1b61ec5b73fbe13732d63c77ed2c4ce50316e253bb60306c6d40daf092364d49

  • SHA512

    4a72024315bcd0a98eac5ffc1d3f86d8743b6e7827819caa6b0fc3e6ffe6735bd484cf9942e98c651659b2adcf30fece38028b6501514ef6c8a38dddfc96e921

  • SSDEEP

    3072:zscUXYm5bkVHe2rHVGNfb81tfzlwAfC5efgVNg4Yub1vpaEWrzDDVLA2ysIIpkby:zscCYm5weqeTKRzCAfC1Lg4YupcEWrzh

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4cdb9f59e0622074f10c12bfb1cf290d_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections