General

  • Target

    b9ca3dd2cb94b25fbec2eed7a3ae06a9_JaffaCakes118

  • Size

    24KB

  • MD5

    b9ca3dd2cb94b25fbec2eed7a3ae06a9

  • SHA1

    29fb95e9c98597e4dabdb6dfef4f48f5d5393182

  • SHA256

    ce3fa26d3d37d999d73636d4c9dcd4bbdf03a37e58927ae71769eee6a6eff5d4

  • SHA512

    7a801ed803c94d81523b5e49c5e3a5c4a2063df29152f2e98a3d4c74b648e8ab2b51a3751f0ae07cf1b5acf7e0ca3d51b4b023451b71b707fa3f7e8d2c8a3f79

  • SSDEEP

    384:CsPabKjSJTRVpl12UE1OB0IcWyk7pG16aAZvCzdfZ4Gts9Vxp:CscnVH1y1w5cW5o16NvC9SGsVxp

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b9ca3dd2cb94b25fbec2eed7a3ae06a9_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections