General

  • Target

    b6f3c0944de90a81c4043d8f616b85c7_JaffaCakes118

  • Size

    17KB

  • MD5

    b6f3c0944de90a81c4043d8f616b85c7

  • SHA1

    576824ff1cf9fd25c63a2324a44808ee1ffe4230

  • SHA256

    6bd7973e7279400c78cbe36ccc712b1f0c00c73453ee3b18c0a21b85dd1edd93

  • SHA512

    9fc37bfe4c9748615815d9d273d77652ca07737150e8944f24b3cec0a610f5781f2d67739e748b4d411228449cdaeeff7d6bef24c5fd956a893d0ada3893234f

  • SSDEEP

    384:emXHm11tlzfjpkYH4UM3BOeBwgBHsLh6kcK5eF:e0m/jzyYYUqLdKwF

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b6f3c0944de90a81c4043d8f616b85c7_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections