General

  • Target

    af3ac5e381830f09dd6dcc4120c33d29_JaffaCakes118

  • Size

    29KB

  • MD5

    af3ac5e381830f09dd6dcc4120c33d29

  • SHA1

    f366a16a108c0a6e551dc1d26965d8ab5bdbf822

  • SHA256

    d7d65ab036c4f53809f54bd1edf850011d3dbc0466af1751b8279318e9423f5c

  • SHA512

    460c729f59d5682873225dcbac02e67ef9eed833acd4eec9b8c42f91551ddad505ab4539c28b59336b2f2fe189ccce81922684a9d7348169702e3fe816c18820

  • SSDEEP

    768:tBaLxv5KPsZuHof2RrMGB1Wh0NAQh2hHz32zzsMASZcLU:raCPo+WSnwhT36ASaU

Score
7/10

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • af3ac5e381830f09dd6dcc4120c33d29_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections