General

  • Target

    64648c963483e0554741f48905bb71e8_JaffaCakes118

  • Size

    44KB

  • MD5

    64648c963483e0554741f48905bb71e8

  • SHA1

    6409848f49c62393588a22ec2caa1d46f3f115cf

  • SHA256

    4d1e49f243c0dab9e202a33f8540fa2757a6f776ce8596f361dbafdeaf258d04

  • SHA512

    54ff6dc4bcf7a63d8562f2e716a416b6bc69942c1b0a94513c376ab8fb7b3aee393cc355f1265837d0a8b14c1a304af4e5d444cfd902c801835f0ada0ac6b8ce

  • SSDEEP

    768:Ym1AHFiU9t7QuKPF8tHmVfYXi8KhweTyCFMFoltXoj:p1vK1lKOFKhwkyCquPo

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 64648c963483e0554741f48905bb71e8_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections