General

  • Target

    fb6cc4969157fc70eebded62f7475d78_JaffaCakes118

  • Size

    84KB

  • MD5

    fb6cc4969157fc70eebded62f7475d78

  • SHA1

    43475af25c8d55bc816c212b318c9f05456e4b07

  • SHA256

    1c3944047d86b2abfb98e779e0fb310b7ad73ee9941649e82f33370c5b8dde28

  • SHA512

    f097d3fd6a64b658433264ea2f15f74702a0d0590da58abba38f26a66ad54d32f2d74178bd7449651a17eca817e3ecac764b93bac6c0dbc555945dff68bf7214

  • SSDEEP

    1536:fE5kPCwAGIaiecDxHnycRcAt+FEV9AvxKXryJW46/KCii5+BwSIEJ48flzN6tz:/PzAF1LDxHyc+AUFEwAwW46D/c7ITOzQ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fb6cc4969157fc70eebded62f7475d78_JaffaCakes118
    .zip
  • DOC_Receita_Federal.cpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections