General

  • Target

    b5e4d0f82b5eae81bad02565c4a6bb46_JaffaCakes118

  • Size

    152KB

  • MD5

    b5e4d0f82b5eae81bad02565c4a6bb46

  • SHA1

    7da4aa11faabe5ffe399f2071c3b23f3112529b0

  • SHA256

    f287b48f445508aeb749ab055e2845353acbdd2c562341b2f00ddf7e4c59b6e9

  • SHA512

    62a97afbe54cc2bc7e99f23581a47cd01b5160823a4ed2e3fcba568fb3e482b0ab774fcb6bd9956e344e3b17f9e106b2857a083882c115cc8e5c87937e6ecef8

  • SSDEEP

    3072:fsflKbtMfcU2PFOQa81FHoVEhm/NFW9kY0qUOG5teqH8eUxDZQEKhemqDxGeBqZi:kflKbWfcU2PF/RoV+m/P4Arc4PMQThvW

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b5e4d0f82b5eae81bad02565c4a6bb46_JaffaCakes118
    .dll regsvr32 windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections