General

  • Target

    af4e51c698f3954cf630f960b7af43aa_JaffaCakes118

  • Size

    128KB

  • MD5

    af4e51c698f3954cf630f960b7af43aa

  • SHA1

    5dc93808687ece515f2ee2ade75d28b8a310f820

  • SHA256

    15c06d3cdfa964c278f46c388765b4f73357c02eb067cfd0ad4f848a53404109

  • SHA512

    734bdd236ed8cef80371c8a54d6179ace178f24849645e71444c7732339e06dfa31450fb2a52e611f8dbc37621c648e55b0c7a2ecfed00d7ae32729e9af7ffac

  • SSDEEP

    3072:jLl9YFwCj1Gq2RsLBU88yYCvxQUkUlmbtLiuWcGTPfrL2y:wFd172R6vJvxyAWFiv3Z

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • af4e51c698f3954cf630f960b7af43aa_JaffaCakes118
    .zip
  • COD4.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • COD4.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • COD4.ini
  • ReadMe.txt
  • Screenshots/Thumbs.db
  • evilLog.txt
  • settings.sj8
  • stats.sj8