General

  • Target

    8ed05b89c7cc1df3c946f1bf709540eb_JaffaCakes118

  • Size

    329KB

  • MD5

    8ed05b89c7cc1df3c946f1bf709540eb

  • SHA1

    385366e35612b8bb88c86e283d7f219f2df8696c

  • SHA256

    139daa1616217b52f268be909cc4511c5d206ecfb01d40edafd3d405042ae3eb

  • SHA512

    0d1def9e6b69f80268bb19791a63ef6f1afbf57e107b441a591941e8c6c2efc864869528a0d5d7d51f85cad865a6a0f1b7d62d0c1e3fc1d1e29fab5e74ad4e0e

  • SSDEEP

    6144:WxkGBaJGV29V3N36n3uNL2J8uM5OaHd4gqwr/HqlxiKeg:Wx7OGVwh63w5AdwrvqlgTg

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ed05b89c7cc1df3c946f1bf709540eb_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections