General

  • Target

    d3f8a015c58d7215dd072d8529130596_JaffaCakes118

  • Size

    168KB

  • MD5

    d3f8a015c58d7215dd072d8529130596

  • SHA1

    d32e3ba1492d0604cabd37140865101cf8e70a74

  • SHA256

    b8f2f4b06861677aaf26c94e1a8f633e373a573cca4aa7a5845c9c2c87a651a0

  • SHA512

    a2f2b45e455d555cf1ca219ad035d2a6ac249f8feb54f3806da399f97340daddb7297d357df27e6d8ad13d08c490285ee15a6154412a00184bfa57b17fccfafa

  • SSDEEP

    3072:nrlzQ6P7UIzGaVprIieJCfVAbDm6Cu8bRD5FfakFlrcimhqhX5XnHA:nrlQ6AdaLc6aba6xAB5FbfgiXX

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d3f8a015c58d7215dd072d8529130596_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections