General

  • Target

    fd8194def3c0c0fcf1f9f6eb9cedaae3_JaffaCakes118

  • Size

    98KB

  • MD5

    fd8194def3c0c0fcf1f9f6eb9cedaae3

  • SHA1

    e8183c993435fdffcdd8527d37646a70820ed48d

  • SHA256

    189d407c9ee324a995a3586c32d28eb92b2e82a809b615a17204f2c22f5e344a

  • SHA512

    ecccdebde1bb550a211b8019f3756c934c4f9059017be71056e2c006f2339d09802f3ef36bd7808c60a157b55bde2f6a680554076004c77618b69a5cdea7d345

  • SSDEEP

    1536:Sfblg58mVExWQIvE8giBUHcfZbvYh7/E/oNEW3OY4w8eFPsALsiXnE6aIJ4kInFq:QF7fkEQaHcfpc/E/oN4nWNL5XE/IJ4B

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fd8194def3c0c0fcf1f9f6eb9cedaae3_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections