General

  • Target

    c7f9c542d3fc77635394e1c8f873180d_JaffaCakes118

  • Size

    237KB

  • MD5

    c7f9c542d3fc77635394e1c8f873180d

  • SHA1

    ab188a37497c37ebdb988ae98f20ec5bbaf151c2

  • SHA256

    e064dac1101012909c8b555ec1cd47641c8022d6b8ec80968bd8777bede66240

  • SHA512

    e6d8c063ef82121ced62ddd9e4e3468b0659f2213ae5bd1d6320ae29ffe45853d8eeef6628e1eaf0b96c678d1da285b0c61d714a1d179500d696593d465578e6

  • SSDEEP

    6144:cEwiMOuE5D76vQrUkQlqn1Uj/fji3ecwr/5WUefukmW:cEwiMOXkSUkQ01Uj/fji3dwD5WUef7j

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c7f9c542d3fc77635394e1c8f873180d_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections