General

  • Target

    628b42ad464bcdc40532dd0efee185f4_JaffaCakes118

  • Size

    161KB

  • MD5

    628b42ad464bcdc40532dd0efee185f4

  • SHA1

    1b290b4a8e2d41aaa4a216e59dd87d6a0d9ef64a

  • SHA256

    1d88f117f3afd482a2d27266bb208ef0c4f36995ae1024fa673f61b23b3d5c5b

  • SHA512

    f8fefcb7dacc1370f9b571f739879137cd20f362c1160db9b47b45b50d5f024d0b0ad6a036979adc3b38b506d362ae08b5fed40b8695c843a9791e03ad4830a1

  • SSDEEP

    3072:nrzEWi/vhPFh/eO3rgtDuJS6lvXu1LgKkL0tk6j6JbYxqgTOJhKx8:v2X9FhJ6Du1lvXy8KNtPjVrT0hK

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 628b42ad464bcdc40532dd0efee185f4_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections