General

  • Target

    db5977ca79c5e04dc2de5b2ee4141776_JaffaCakes118

  • Size

    49KB

  • MD5

    db5977ca79c5e04dc2de5b2ee4141776

  • SHA1

    f225e374ce32c9a6b5fa9ef78251814947e4d2a3

  • SHA256

    edf4cba841ea462d10db8d3b07fde79c99c150c42073aa48d0cc4ab73b35f16d

  • SHA512

    6f297b4b8506658d504ca27510ad1c7e94817c0b829a4f38e8626defb5376da9d5a9178e5df5f4a89e6cea4a7dd9069d637e9403ce31b2c89a577d6dba9ce635

  • SSDEEP

    768:dnyeTa6CXt6KTX7Yi1lEklFyu+RmLsZ4Xk9hOXf8grX6yAO/fStd74D7cKWAcjzs:vvyUKgik43LseRRr414XeAcjzs

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • db5977ca79c5e04dc2de5b2ee4141776_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections