General

  • Target

    d1be3cdc0d7bb6dda2e1450a1176dc40_JaffaCakes118

  • Size

    1.1MB

  • MD5

    d1be3cdc0d7bb6dda2e1450a1176dc40

  • SHA1

    77bbe7a737c8dcd6ea7069c2618ec767c6413cd1

  • SHA256

    ef42a4d20f02ab39175c5f4e14fc5865ae79e22806e0b4fa4b4fd8ccad3a6341

  • SHA512

    33d560a75804156010d8b8f3b138562437e1db207c381635054d21d48b2994dd4038ba6a38c7370cf6d1a87f0b3c95a210567d1c087db37627b0575f4a306647

  • SSDEEP

    24576:pSw9JLsZH3Nm9IgdtiX+H7iIzp74OWm1CrtiouLbdOBk:8KJLGH3Gdt++biyXWm1WihLb4k

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • d1be3cdc0d7bb6dda2e1450a1176dc40_JaffaCakes118
    .zip
  • enterpop2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • enterpop2s.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • enterpop2s_sp.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • evdat2.dmc
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections