General

  • Target

    db63d32f86bccfa189e23adba3146702_JaffaCakes118

  • Size

    50KB

  • MD5

    db63d32f86bccfa189e23adba3146702

  • SHA1

    842a8aa4b3bde54793420bff95cbd454ab7db555

  • SHA256

    4f0630c812e4dd7f4ed0719de38ceaad670f2954f38e7ded152b218874a5ba0d

  • SHA512

    56ce915c8f4be3fd0ef68192a09341171c57d703eb21e261c20c73890759a669c06ba14986be8e2f8f99cdb512517388a1dbf40c9223855b31cc5cf9d2773f46

  • SSDEEP

    768:SpUfnaB9/0vd6ajU2VlwNbU5DE6k4BtJHo5OH8Gr2bMxeQ2eG/WOwFvG5QkuRWP:kB9/q14FSDE6k4NuDMcNj/WtFvWP

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • db63d32f86bccfa189e23adba3146702_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections