General

  • Target

    dff72b846823ab1be912100db16f689f_JaffaCakes118

  • Size

    351KB

  • MD5

    dff72b846823ab1be912100db16f689f

  • SHA1

    00c4afc375185a07f6c193bfaf3db3035677a858

  • SHA256

    f00654cfeca9c175895d4e3ed2e12a8b0abc7866baea07e174d73805a22e2e06

  • SHA512

    ad1e4507b1b5ce5080147de29cd9e9b417bef8cc08ae6f5d88596c65ac4423e2641f9217d5de2e39b82c2bd8df0c969111b3bf25bbe232d0b601c7045fa2f61a

  • SSDEEP

    6144:Vwu0a2qD5hiOFNGjALRxiEjzLL7X/yTS5izVaGXO4sR8rXf4OdOoTBBX:Sja2nOFNG8RzjzLX/yTTV7e8Df4c5TBJ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dff72b846823ab1be912100db16f689f_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections