General

  • Target

    fd8bd191f7f0e92321fc37ff0c5eab50_JaffaCakes118

  • Size

    99KB

  • MD5

    fd8bd191f7f0e92321fc37ff0c5eab50

  • SHA1

    2187cecfd4191b6edac06409ace38b8ec840bad6

  • SHA256

    7b273e6d6b948bfc041b19b83aff0c7372400c051eaa53c433f5d9fea03b4c0d

  • SHA512

    da1e56429155d9dc516d1832db0505c34230966f0eb5eff036931bcc635ec787300018302ee4ea65f616644fe1915ebfb3f8cc6e27d089bc965d0f4a14bc0779

  • SSDEEP

    1536:W6c2bcATlbcKNyRAOlslsTKX5b8LK29JzP3o2Z/x1tJ1TmkATbkrf7kgwQDxOLFI:WkI0tvwKsiS9JzP33hwqf4gwQDxKPm

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fd8bd191f7f0e92321fc37ff0c5eab50_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections