General

  • Target

    5c4b5c656adc5f2e50f983dabbb6cb46_JaffaCakes118

  • Size

    107KB

  • MD5

    5c4b5c656adc5f2e50f983dabbb6cb46

  • SHA1

    b2c50b5fea6f3aeaa993fb1a478dde72e2f65011

  • SHA256

    dd349fc7b4a25e82128a1992292b2ed688012512dcf6db93bd9c83516e966e14

  • SHA512

    c4c11246fa3d17ba914ff20c04abfd0934842f8cb5748fef4830952a1d5e7958ea76e26603c7a26f9681cd0d6b81d9f2bc7f7448d834b3afb9e7f04d9760b1d1

  • SSDEEP

    3072:HrCLf2a6HN0+ShLU2L+V5EhhKwa5tbmuL+EFvRtcoM5:LKf2a2yhLU2L+VM5aDV/FRtZ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5c4b5c656adc5f2e50f983dabbb6cb46_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections