General

  • Target

    f012ae1403e735135dd1bdced1b70c2a_JaffaCakes118

  • Size

    103KB

  • MD5

    f012ae1403e735135dd1bdced1b70c2a

  • SHA1

    221992e76bbefca2dbe28ba1ffb75d29a62fc229

  • SHA256

    2faffc90decbeac31fd19954a4eeb52b717c1c0c2b8c2e04eac9669ddc0a697a

  • SHA512

    98665da149dbe1830dcf62d1239e7669f3c1dac8e4c50f5d578be2ed4471ca17dd6aabeb556d5a13168fa76229f3b54814866bfeca84e17aed87992744a42bcd

  • SSDEEP

    3072:IgXdZt9P6D3XJbCBXjbqVr0NDOO7etzObiSQg4sOJ4NEGs:Ie344Bu0I+eLSQbsY4NER

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • f012ae1403e735135dd1bdced1b70c2a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $TEMP/FRPHjktv
  • $TEMP/FRPHjktv.dll
    .dll windows:7 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:7 windows x86 arch:x86


    Headers

    Sections