General

  • Target

    ef151aa137bf76dc6b58fadf8c10a41b_JaffaCakes118

  • Size

    233KB

  • MD5

    ef151aa137bf76dc6b58fadf8c10a41b

  • SHA1

    26f18d0f7ab20ab1f42a8eb4ff77ff805f4760af

  • SHA256

    909b1470e9611bc0f2a405b0f6ae020550ff94d1d64c993aec3e8ffcc53e9fff

  • SHA512

    3a88c26859ed52f2fdea01c841a6c4c1dd54138a6b61ec194409d60c38b20a61a335879e9e0f6e7953994a6c2bf5da78ed1d3676709c58e021a95b7508411096

  • SSDEEP

    3072:Fl3MLKyBG3M4MTAiIunvfQ/twcPVwmFFUmSdN91vSv7IJniKzHz62mFTxp+0ZByU:r8OyBG3x+g+cimSddv8I62c+0ZBWP1n

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef151aa137bf76dc6b58fadf8c10a41b_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections