General

  • Target

    5fc4716fbe5b1c81ddf765135ff39c04_JaffaCakes118

  • Size

    340KB

  • MD5

    5fc4716fbe5b1c81ddf765135ff39c04

  • SHA1

    ef321cabe16adcf2bb945422b1e9d036ce7c83da

  • SHA256

    a2d45d4a184ec277db5b6ada6de6baee8163c3c41e155b0b8c8beaec3bd0b6c0

  • SHA512

    ac784c40cc15b846a74945efb8bc69cf1425dafa6f820e766ae0e7e2377252b8732d3cd375d7525fc0b7f77e1ead55471bdce5ab7b1f952e871d3a519b30738e

  • SSDEEP

    6144:f63iGQCEprqN9w0srcWLSrXmdhtkzsKdICuMkGgarlfL2b0H5o:f1CeoQcASctkzsKv7vgaJfLW0H5

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5fc4716fbe5b1c81ddf765135ff39c04_JaffaCakes118
    .dll regsvr32 windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections