General

  • Target

    4de9b3ddb121f547cfebf1a91bb31549_JaffaCakes118

  • Size

    16KB

  • MD5

    4de9b3ddb121f547cfebf1a91bb31549

  • SHA1

    6ce33c0e9c3c5b092208067f7921862f812db0f9

  • SHA256

    49f0821d03eb03de0cdc3bc7b166d22bd5a162f57867dd12d96388ad89133aee

  • SHA512

    d74b14c30203bd7f5fd5d1a395656d7249f7e3d0d737c67cee3681192b8a6a0732d03b4b98ca0a13f58ed8211639c35ca132133affbed84d1a97b9d0db731f0e

  • SSDEEP

    192:njNQRHYcwd8E5b2zGLL1SZCS8LgUIbuRGdDckAJMMUV1RKvG9PAuDpoG+9yQQL89:jWHY1d8EZTUAS8kHKRA3RYuiCygSYJ2D

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4de9b3ddb121f547cfebf1a91bb31549_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections