General

  • Target

    fb2459e475092749c952b4b3f9e802b4_JaffaCakes118

  • Size

    318KB

  • MD5

    fb2459e475092749c952b4b3f9e802b4

  • SHA1

    399ab388ece8aeb17acac2770b4168e6b0e32a7e

  • SHA256

    c2fb446e90c0d4680e049d1b9c67f136ec63bb06bdb3b562d21cdfb797bd96ed

  • SHA512

    92a52d643e198d0587ccbbecfc0453f2baec252fff94a40ea5121d78130220029235c95a2bf4550fa151872d6b2150d797387626574bede3ecfadeae703adb2d

  • SSDEEP

    6144:Xo/wMfM00TM50ysTfVo3D3uLNPeFMHrZ1Tb0lx2O6VyGmYlg:6Mno50dT9W3uLo8XTYKOaH

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fb2459e475092749c952b4b3f9e802b4_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections