General

  • Target

    d2bb07325d969592f0ea5e65461b70cd_JaffaCakes118

  • Size

    194KB

  • MD5

    d2bb07325d969592f0ea5e65461b70cd

  • SHA1

    b9837b85a242a05504c38ef5f4c0758feaa367d9

  • SHA256

    bf8b101f49f20862b7f026e72f11a0089c4d741dc96b41ae5037ae9d8cb56b70

  • SHA512

    201ccaa087aab1e9962a4dc0905b3a5e5e8c6754a6bbcc61bbe9875f5b97c7861bcc2b9c2bf8c85db2b3bb14cbe15d370ca0ac10182c81c15cd682e35c685ac3

  • SSDEEP

    3072:9bhMAVF6/YjD7BOqV0u37mYsl9SPnjdTKYYOIhB+8Oj2VS+fDAfvyIYO6h+sd:YAVNDV9V7q7eR0f/k+bhI/6hr

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d2bb07325d969592f0ea5e65461b70cd_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections