General

  • Target

    637e2ac6bef5f16b58069757634e92b0_JaffaCakes118

  • Size

    60KB

  • MD5

    637e2ac6bef5f16b58069757634e92b0

  • SHA1

    97ca03149a5f9e8fc0b4ab01a26b55eeb413d159

  • SHA256

    749bcef269a5e2175a115eda6c8231060eb0a198b9ae163bdbd6b6581562ad76

  • SHA512

    614d602b593d63c633e4eb4e72a3d56a03a4c44d3a63eab735f6c825a833e90e57f0b747ff5519d9b3be414a8db13b16d221f61e9e96511e4ae72f10138fdd63

  • SSDEEP

    768:nbY4lNzNwZ2BgHtGT3sk5hbHVd/pHQCZcqdoZlSAeiFjFgSAJiP/pyBs4ExaNk9m:EGNMHijH/Vjc7lRTBFgSAm/sBYagip

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 637e2ac6bef5f16b58069757634e92b0_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections