General

  • Target

    f67b0c192e5a396b680a565cf0ab6872_JaffaCakes118

  • Size

    113KB

  • MD5

    f67b0c192e5a396b680a565cf0ab6872

  • SHA1

    b74f010e5fa77b37ddd9c94c2b4ce4eeba7879a9

  • SHA256

    3e22665a6cb577055b9b71eb87c948a669862b32ab738580c23d9d20bd243711

  • SHA512

    0898ab093ecae856a81c408f9da534a2f060d17c3efc61d65040745be7e08963797afeb48a4b736c433c1ac50d8b79c1929e148c3c9578456ce615d9bc0bbc1e

  • SSDEEP

    1536:7WGaDHSB1tbj0YXnXDUazCXW2gYiXb9LLW+9sFEdkB//KBrbuabj2Cf4zFqeczxh:YGFbQYXTlCXWmyq7EWxKRj2Lcz/

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f67b0c192e5a396b680a565cf0ab6872_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections