General

  • Target

    6f372d4ec9fcbf11e1debb0099ed0199_JaffaCakes118

  • Size

    336KB

  • MD5

    6f372d4ec9fcbf11e1debb0099ed0199

  • SHA1

    83bf17b761bb86af79c67762cb1d0f70c5e0c623

  • SHA256

    81b3fcea363674af88fbe279f7457fe4c12489186126fe8b81ff2f42a0008823

  • SHA512

    a8fb955018ba540f6b1d23a32acc1e29855b4aee598ab0b9c2349ffe9358545f27abdf043ba166fe5910a3ab58266e50c2ed9e03bfc30cdde46b38664e39b8a2

  • SSDEEP

    6144:AXseWsacFm9hTYHsieieLMrZYwvCjuANdSnf/Zdnrv4W1mHg4wSaKOx4IJKKDN9:A8AanD+eS6576f//nsMmHy2Kh/

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f372d4ec9fcbf11e1debb0099ed0199_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections