General

  • Target

    6f9bfa416b1a1f30084026c1fc4e28cd_JaffaCakes118

  • Size

    26KB

  • MD5

    6f9bfa416b1a1f30084026c1fc4e28cd

  • SHA1

    726be084e3414a9da7e0c11f1a5d283fd9cc2ad5

  • SHA256

    6d5441e8c24245209dcda19d16b8206cca4cbadd6abb796beff20fd8fa9a3cb9

  • SHA512

    45cad5fa69d0842b72a29beb73c6121ff618ec6cd7d6d7147885c2f1b5015da444dfae7dd86b3ab8d1ebfd890070f7dc34c2d070de7edfbd69ead95eb2218055

  • SSDEEP

    384:Hd9OaetndW25KhIAOCrR1t56hVKC7FwoobXvqmXv1y0w8PxC4K4E9M8MG2C2Y:+42855JCf8XD1B5KR9WGiY

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f9bfa416b1a1f30084026c1fc4e28cd_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections