General

  • Target

    a4afb524d6949b72e3f7673529673b67_JaffaCakes118

  • Size

    75KB

  • MD5

    a4afb524d6949b72e3f7673529673b67

  • SHA1

    0f25be068447fa2d206f61e0a31332759cfdfc2d

  • SHA256

    efe88534051f6ef480e82ffdd21679cca3d5455bfd11b58fa36231d3563a3356

  • SHA512

    56e220160f83f7b41a294cefe34f8a99da611544a47f422c45fe8c6938ed03f6dbb037855bc64842da559bfa5c55d3b4e7270fe31f83b0376dbb3f0c9c555510

  • SSDEEP

    1536:iv+Be0iEdAxVBYwwJJKE1P+7gAMm3KzjYR9sWYh7GxR8ilRfYJgxbzn5WOoaU9R:iv+BelthwJJKlgYaQL7D/xAJqz5WeaR

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a4afb524d6949b72e3f7673529673b67_JaffaCakes118
    .zip
  • facebook.cpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections