General

  • Target

    a344f8bd20aa3e670c545c13521a976b_JaffaCakes118

  • Size

    89KB

  • MD5

    a344f8bd20aa3e670c545c13521a976b

  • SHA1

    26e2695e59a0e10b8b32f761cee45c66979f64cb

  • SHA256

    69519d591cae9faa7fe7c863dae2c30ad4406969042d087cb357300e494eae73

  • SHA512

    59583b4f9550b455df0d0a8deca4edf88ac1443a6e964585d1a59f9075c66dd03ad0d61dd14ffb08b7d549a91006c41959c763b5960096595f2c676fffe87675

  • SSDEEP

    1536:s6c2bcATlbcKNyRAObkz4ElgCXQvWxuDphlV9VHXBOUW7SoKUG1Mn3gHaxvLXNsO:skI0tvwGKCXQE4zlDVH9Eg6xzXNsO

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a344f8bd20aa3e670c545c13521a976b_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections