General

  • Target

    6646d51cb9d5afd3d2489336126ef9b0_JaffaCakes118

  • Size

    350KB

  • MD5

    6646d51cb9d5afd3d2489336126ef9b0

  • SHA1

    fca4a0604e0b361f77a33994efef715ce2f00876

  • SHA256

    4f8fa0e5b4aee234f3627020fc38247acd4b68fdcf608d0c2da59aee49dd5a1c

  • SHA512

    0bebbe9a40735d40ac24615c876bc66dc838aee7fbe5f0b1e77b5504f305f1012727d81e52113eb597e0ca2b8a972af5fe21b87de03426af37c7bb18e7bf635f

  • SSDEEP

    6144:NAN/NxN6DcYDfX00vHG1Z7s2/EzCUqXi8drr5RYWfWsyrWdyf+1Ae50Ch4K:QxWfXPvYZ7s89UqXDd0mHdyW+NK

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6646d51cb9d5afd3d2489336126ef9b0_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections