General

  • Target

    8b9c23d0cf9a060f51b712c1e9537d29_JaffaCakes118

  • Size

    469KB

  • MD5

    8b9c23d0cf9a060f51b712c1e9537d29

  • SHA1

    b18d44b6ff12f621a5b67983b28e1b9cd081178d

  • SHA256

    5d5740893cc7497258c47a28e25270f735d18c8f8af3d186b4b71f0071171825

  • SHA512

    0e04519721b352f2ed09dc7ee8a686f5ee8806641bb3dba4e40a06cbee86a4fc8c3317eddeffaf2d407c904803f0e29176831a9993bea41bdb9fa9a154734996

  • SSDEEP

    6144:1EePD+XRAL/IjBD97LCQdcHV6k4x4NrnRxK/rrxe+dq0My/XfsgmFBWjZHMvBlGe:qe6hRjB57ju16kw4Nrn/85o1FCMGC9F

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8b9c23d0cf9a060f51b712c1e9537d29_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections