General

  • Target

    d1fa3cfe893c4920f1f658f0cef92245_JaffaCakes118

  • Size

    86KB

  • MD5

    d1fa3cfe893c4920f1f658f0cef92245

  • SHA1

    315b519e256c9c0d30fbd7d9686bba846bb910a2

  • SHA256

    bd80e4afa6d1e2a1ef24742f11fab6f5a51eb762b0ac17d6bdb7c6c8bc68e19e

  • SHA512

    21e569aa8c65e8f26fb91a2cf8fabd945228ff224a77c1c2baa07549db8a4282d9e9b318a860754e8232b45f02762effe027a84eafac0d0e78b0809f7a090f16

  • SSDEEP

    1536:KYvynn+A2VjSCRZO0kmFrEqZRnsYHTgSJgOyQeXlCeFYRs+x+t+u38jyYu:Hv4+Ay00Hp5RnshpQKCkL+gt+mpYu

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d1fa3cfe893c4920f1f658f0cef92245_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections