General

  • Target

    d1d9c5db9cb1ea83fe8c9cc62695f88f_JaffaCakes118

  • Size

    23KB

  • MD5

    d1d9c5db9cb1ea83fe8c9cc62695f88f

  • SHA1

    07cbfdf431c7ad7d1d3a0d0fa2db0d4573135da8

  • SHA256

    c677ad3ef0d8956703ba2ae7bc060d965a79b0d93a313220bd965a8855a4e42f

  • SHA512

    b29d4318c894f0bad353e373b8a619d76de4e6acf44ffd16264ae148d79c4f609e1e2595b51b4870f01e5e9f9eb313215dc280ddef0cf9e301a3dffd0a039f30

  • SSDEEP

    384:Qm0bL3wrLDN3c9uDvdxXBva1lMe7RbDoJUW5cthUwqGZ65wDUWnNW6:YLuL5suxxC1lMe9b0W8KpFZ65W

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d1d9c5db9cb1ea83fe8c9cc62695f88f_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections