General

  • Target

    a3dd791c05e0306488c9e59e44883c88_JaffaCakes118

  • Size

    62KB

  • MD5

    a3dd791c05e0306488c9e59e44883c88

  • SHA1

    603e4f34d65b7784ed38e43c93a2f1b3412b1f0d

  • SHA256

    64771bc1ebdeca71aa6b8f65f8f16bece37f39900be99e8de200feb3bc155631

  • SHA512

    50315969f40c9fbd70bf45cd87c9a2b240d2ad795649b6481fa7b752b39a7d7a96c898f5b9f5fa0147d8447af7626ab211d6f539660b8933b5311dd5232b7280

  • SSDEEP

    1536:+e+gXPCBARaWEC7pKIM7EgFWUa83QNohpETRLr5W1c:+kPlaWb7pKIkEgFWQREr5+c

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a3dd791c05e0306488c9e59e44883c88_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections