General

  • Target

    c12aaa20eca869f7b2b1d995ebe045cb_JaffaCakes118

  • Size

    109KB

  • MD5

    c12aaa20eca869f7b2b1d995ebe045cb

  • SHA1

    e39d32b24b2785411dbcd1fdba7bff1198b1f43a

  • SHA256

    8a071d0a8b208cd055e067fb561b3959d7f7f26305878b71254693fe3a2c2910

  • SHA512

    49965de6c12b62babfdf779f4a5cadc480a7636d1ba3436377888c32bfddddff0268a164099aa22530205ad39f44cb9b4d562941e41f123b4572e863ca4a2a12

  • SSDEEP

    3072:GYDVPO8plxXjDv9fWPRo3BwILS8G8Ulaiz/RY:lpmmf/V+PGRjdG5AU

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c12aaa20eca869f7b2b1d995ebe045cb_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections