General

  • Target

    d48fc79f897b21a2e74f3b36c8df3451_JaffaCakes118

  • Size

    89KB

  • MD5

    d48fc79f897b21a2e74f3b36c8df3451

  • SHA1

    0950157d524e9ec62307a2891a622453e15cd2da

  • SHA256

    adc48ee297c9a775f60f18998cb55f08ce462b1bca2f2d62c788d81659e5ecf9

  • SHA512

    9d6291d1195d5d5ef1bc077c6a8dbf92369f38d0301973ae472fa753c969839f29be702c140755b081bd8da2d063c5ea3dc8834740d86e3a4999d94695fa9205

  • SSDEEP

    1536:Y6c2bcATlbcKNyRAOdKcGyrv7EQI/+Yhcco+ZBF7hX/6xIznRz+1/fiMCretcTT/:YkI0tvwdlGyrAQWpoABFF5Rz+5KMe

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d48fc79f897b21a2e74f3b36c8df3451_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections