_LOADLIBRARY_DUMMY
_RunAs@16
General
-
Target
fee198a4131bf4df50359b0fe9b3405f_JaffaCakes118
-
Size
34KB
-
MD5
fee198a4131bf4df50359b0fe9b3405f
-
SHA1
7bfcbb31d76cff70660e1cc74dfbdd3016777725
-
SHA256
0f027224de143dd1919547b80e91aac782ee1fe9fb6bc2a7a3f13046bacf2b90
-
SHA512
ac423c80b5ddd4ae5dec825eddc9c6e55d5cc31822127c988e41db4b0590e3c5bd0d3b770d67baf078dd88a903c6353ba2d4e99720ce9b010bde37f9e3e970d7
-
SSDEEP
768:I+24iMbqQFBruzXXCPwAy9x43aMZYP3a2HwuCpTlTieRAfOlUdnbcuyD7Uz6T:IGiMbDuznCPwA04cK1Ae+GOnouy8z6T
Score
7/10
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
fee198a4131bf4df50359b0fe9b3405f_JaffaCakes118
Headers
Exports
Sections