General

  • Target

    d2452d69cc3de9507e74d5dc0f5092a7_JaffaCakes118

  • Size

    539KB

  • MD5

    d2452d69cc3de9507e74d5dc0f5092a7

  • SHA1

    d6e89a96feff856b58129c5bbd5062634c5cdbae

  • SHA256

    4eaa426611fb6612e6a8853a4c77dee2db16e6f2e8f8202daf740bcaabaa21ed

  • SHA512

    9ece74246100951de90e9ef3d53bf3adf0c7829481fcada59b081a14e9cb8f9717ba72dec1342de6a7d813bce5fb260f4de118d8c7949e98a37780833d0fb7fa

  • SSDEEP

    12288:VXtQ5hR8JiCuoiDwJzywkWeFc4TYM2Mq7OHR:VXiTR8JiCu3DgGuNMq7OHR

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d2452d69cc3de9507e74d5dc0f5092a7_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections