General

  • Target

    dd1898e6aa0c0e4e3d0e6ea7c23f6d81_JaffaCakes118

  • Size

    42KB

  • MD5

    dd1898e6aa0c0e4e3d0e6ea7c23f6d81

  • SHA1

    895cd826a14a9b529d68ffd97cfc0218cce07ef4

  • SHA256

    d0faa9ca32e7beecfdb90bb65e7eb35be0ad15d71f5096059ea7d8a312fdd514

  • SHA512

    6dfc68d0a9a7dbd7a6f2d4bda6d7862dc13ab20da2717bedf412ec9428e1bd0e31afaf9f75818cff298358569669c823b2e449b4066285438bc76491fb3ecd14

  • SSDEEP

    768:WEYOuTh6pp8oGQwLDvfOi1Ohk3P5Zij970wJB/QNhcSSsZce:WIuThoilQYDnOi1wMxWokRQhclSce

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dd1898e6aa0c0e4e3d0e6ea7c23f6d81_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections