General

  • Target

    a528e7d710c8b1a6af589ec8e109db3d_JaffaCakes118

  • Size

    45KB

  • MD5

    a528e7d710c8b1a6af589ec8e109db3d

  • SHA1

    92981d150ae641d608ac5c18573dffb4902a7c88

  • SHA256

    e8c982d48e8c00499cecc6a3defe00b6ce9eba8953264b0254b56a80bb806bf8

  • SHA512

    493da0c1549f695d2bb38ce8de19e15949f649af2af69d4a133d3094d6351538455d2135a4bd21980a03a70a34df255fff50ee121307306ee8596729a8863d88

  • SSDEEP

    768:PCWSoH7961AuoAiOYX8xelZ2mIRQeXLA9lvnGxY4LOO7sI7oaUuP7Xn02Oh1an:HCPoAA8xelZ2evQZAI73Ue73r4kn

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a528e7d710c8b1a6af589ec8e109db3d_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections