General

  • Target

    d70be6564e8e92c3ce9dfdbbdced51d5_JaffaCakes118

  • Size

    321KB

  • MD5

    d70be6564e8e92c3ce9dfdbbdced51d5

  • SHA1

    f3067f85b223f628c841e1cc7f4a7ebbb0f70d49

  • SHA256

    2e38a07ab07c85b1efb5a5f32b5632a6d1fd09f45355f95960703d5b21c4c960

  • SHA512

    f3703ac4f22b4d817cae93969421e8408a5dd6dbfb77410cefe2f48425397a03573bf95d3d88677615ac2454f5c1464f225fea587d6dabf866794912144bf15a

  • SSDEEP

    6144:5oTnd0us8mNYenLv0Dt6PN0ypgDx8i/Dv8ane2UnEoA6QtbRD22eHnEQjof:qTa98mxnLYsPmyKxV/HnFbffBFQEf

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d70be6564e8e92c3ce9dfdbbdced51d5_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections