General

  • Target

    b9d2cd5305c435fc308a8b6429b0e5f8_JaffaCakes118

  • Size

    22KB

  • MD5

    b9d2cd5305c435fc308a8b6429b0e5f8

  • SHA1

    7d978e11e2e206b122ddf173cb65dcce77c52c4b

  • SHA256

    6135fcc67983e6df6d1fd5e558d2ee3ad2117d741362764199153c3f7b1c572d

  • SHA512

    bf9939bc75c8128d82cd49f517e01a0b9688de2cecba4f3148c42a5662ec2cca7b39d1f3b719ade3fb7073a9ffb04e4f0e11646910c4aed0f81ecdc8a5319cd0

  • SSDEEP

    384:3H0bL3wrLDN3c9uLCCSlvUZA5CW9J5MRZuyeZt8+fpJB7jUWnNW6:KLuL5s6gvUZ1W5w4vJBt

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b9d2cd5305c435fc308a8b6429b0e5f8_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections