General

  • Target

    6fe96ed44c4f1def3d899a984f3e7c66_JaffaCakes118

  • Size

    46KB

  • MD5

    6fe96ed44c4f1def3d899a984f3e7c66

  • SHA1

    42ec722a1f91a5d9348ee77fbe4fd97c14983f78

  • SHA256

    70a4593f0727d28751aec93e90dd0328e3bb3e3b792f7cbd7b21327dbed27e2c

  • SHA512

    76e1dcaef12a849efb34a49ec963a5c5354a1d2d093741f8748e2ff570905be50357b7811e58dedb187c35d7d1357669e1dd0f9ff535d80f4f27ab9582441fed

  • SSDEEP

    768:4X9lUZYRonuX02HnUBr5K1mjehGzgtTlUen/jYSvypV3mQHlMvJ9P1rlBTUZK9Pf:4UDsaBFK0K4zaPn/st3mPvJ9P1BlKyH

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6fe96ed44c4f1def3d899a984f3e7c66_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections