General

  • Target

    dd02a7a0b26a842979583e51a956bf8c_JaffaCakes118

  • Size

    49KB

  • MD5

    dd02a7a0b26a842979583e51a956bf8c

  • SHA1

    786614540007d14744fa4b0c8860d0df7423ebc6

  • SHA256

    4d475b7e971827caeab4ed4d706346dcab59663491051656c21a3b896a26cc56

  • SHA512

    cf63976ba175a29cbdc0fe6491f7123fcca8ad9b471738ad87d3a09b2a8dd9f4cf1c35140a6f3ed5fc50cab8674b3d356e82f29900b71773ec3b11db5be15d5f

  • SSDEEP

    768:DpCcSI9BFn3ZMnG0PAEIYrk7VZXXqlDpf74QtdZfY/H6d8yBl1EvdDG74BgW+UyH:EtuyvIEIB1XsKQXh+Dw3b74d+z

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dd02a7a0b26a842979583e51a956bf8c_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections