General

  • Target

    972a5efd76295177685c42e5cbd6f37c_JaffaCakes118

  • Size

    368KB

  • MD5

    972a5efd76295177685c42e5cbd6f37c

  • SHA1

    c3ca54fc82e131941580d344ce773dc9d4155c29

  • SHA256

    4b7acfd1cb6196025d25792ab306ec8bbe318799f3872bd7c74ed1335ba29490

  • SHA512

    7a9c613454317e27fab875a87c958baec0fb03c7541b27ed85e5f36110553baa9c53899eae75f51e04241162361419b2dca92ee76374498b7adca770024a9794

  • SSDEEP

    6144:GGmVCx7VxzuoTc9sx3z4dmiFbiV3imTE/xNrszMY2PUkF+O+effrc2zWBFcXo93:GvVCDpbggi+9U3wQY2PUg+OtffrtzWD1

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 972a5efd76295177685c42e5cbd6f37c_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections