General

  • Target

    b476b83cae34c093717a07f0dcb8c2d6_JaffaCakes118

  • Size

    25KB

  • MD5

    b476b83cae34c093717a07f0dcb8c2d6

  • SHA1

    ecb8f0dcfdaa833cfdcbc83a6b0d8c9effb3a29e

  • SHA256

    a7df5aa601c5127f5cd2fee2761ca70e0e4073f6bb3d6d6a776424d52a8760eb

  • SHA512

    bb11f63b58461d0e72203cdc281b3a723a2487285e7bf60f10fc9b974c3e307a067e0227948d1e6d57e9df993412010e8356e810845faee9db6319d13de6c14a

  • SSDEEP

    384:Le7dK+elaHlKuVdY5QexNnjnGfl9+UH5RhlYDVa8kbvSnmJP4gE/Wo/DCsOUJnK:Lmkl+Y5QwNnjPbDVqvMoBE/DRnK

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b476b83cae34c093717a07f0dcb8c2d6_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections