General

  • Target

    b8c5a2b1d65083a30acec8e3ced1a1d6_JaffaCakes118

  • Size

    202KB

  • MD5

    b8c5a2b1d65083a30acec8e3ced1a1d6

  • SHA1

    6e21a246195c62e5c32d44db655849b090155daf

  • SHA256

    51e6ae958e0fd9caa7d3f87a37c44ab1ff50a78c7c3e070ee0bcada04dd4d7db

  • SHA512

    6a7211e3481f7fd0e218969fe261f94452b0984ae93fdca0f8fa78f33dfeba8bb06b2282716858fd41384b15b0739881cd891956b36c4b131d99a72be3a02e34

  • SSDEEP

    3072:mJKaxoaeq/rR2+fp4IGAI2tep+eJ5BrCCVCmwD/0Hgzgf7RCNappSB:tyWqj3p2oep+KBrRVodE7UaP

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b8c5a2b1d65083a30acec8e3ced1a1d6_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections