General

  • Target

    5ba2bc28e0cb39c889c7c0639bae7a00_JaffaCakes118

  • Size

    15KB

  • MD5

    5ba2bc28e0cb39c889c7c0639bae7a00

  • SHA1

    4423183aad6590a4e6e56f27e82ab0c084e92faf

  • SHA256

    296adf0b6b1775c6a56ebb6e78bd14d741fb122635e0cdfc44bb75a070e7786c

  • SHA512

    fb9d1c9bf61e8f00f417ef68f7c3695fc8a6daeb7ff7f1641450ea95d5598b871c81aded9b0e1a2a6876818eb9e6ebd0b2e965801add3856c17e759a0bd9dc09

  • SSDEEP

    192:c+HzQ2hsdmOWlhtb3YnDBbWgY/LvK58g2tHBMg+G5EPQELXETFpttKRdV5A:Tc9WljYD9i7PLOPLXEhpttKR

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ba2bc28e0cb39c889c7c0639bae7a00_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections