General

  • Target

    8c89cf961411f73eac9d43d6dffd31ff_JaffaCakes118

  • Size

    462KB

  • MD5

    8c89cf961411f73eac9d43d6dffd31ff

  • SHA1

    3f412e0fdc84b0ebe3e6d4a3d6694ba3a9ae0d1f

  • SHA256

    4af08f58d000ecd703d1a337aab4852cc66094709c4d8b961e2a96dc02b2b235

  • SHA512

    f76b5cc5ce0ad0287612d134329d2c39aa83d26b38859c1ae3550db93628174f557199efab74dc75384655a58679f80bb04eec2a71ad87658d798fb38fba5b2c

  • SSDEEP

    12288:oGRNVZAacuZ/KPO+iAh4Tg8/bn2muX+ueNoq:jRupuZ/KP52bno+Hoq

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c89cf961411f73eac9d43d6dffd31ff_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections