General

  • Target

    fd0da1c5eb38b80cddd9f1d4d168d5b9_JaffaCakes118

  • Size

    166KB

  • MD5

    fd0da1c5eb38b80cddd9f1d4d168d5b9

  • SHA1

    891182677ca4f318f7b33359dd36ec4cc086552d

  • SHA256

    28a5a41e9a3e3ccfb8696be8255c888c0c56e2af9b247703c201670a5e475fef

  • SHA512

    0667f1bc1d0c1f6db3770de9c92f9370634e0e4ecbde3c856d780442cf3729e2aa9572bd81e58239d34b1aa0da13120a1fafb0b07a3612e60445f953aad851cc

  • SSDEEP

    3072:TaIwClZvBf0kemmSzUB/Km2yUlCQ+cRK1w6ZUbalyTzBc8u6ZiVYQ6qcvI:TaIwCh0nmmSAB/KpR+c01ZZKJnBuc/Nw

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fd0da1c5eb38b80cddd9f1d4d168d5b9_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections