General

  • Target

    dffdbf49e56b90464cb162b78714bb4e_JaffaCakes118

  • Size

    75KB

  • MD5

    dffdbf49e56b90464cb162b78714bb4e

  • SHA1

    f3ab7f1cdd79d80cbb0bff125798c41c99922c94

  • SHA256

    da6600773fc651565198901b3d75f5a8586e07dc771e3c5b7eaf39e3d453261e

  • SHA512

    2203322f6b2a03b1539dee408c4adf1f2266dec67e37d1a8cee4d0a48fd4347bc771632aaa19da33cba51d1680878a7fe83a3506c8d8ddbc0d8704e93e83d6a9

  • SSDEEP

    1536:XCWpB7CpPt2PREUulPafYvSWI6+EToA6WbPW6Bq:yWpINt2JEUusf0SWiEkAfbLBq

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dffdbf49e56b90464cb162b78714bb4e_JaffaCakes118
    .zip
  • facebook.cpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections