General

  • Target

    08a94b1720a17b61cda0b7414d14432d_JaffaCakes118

  • Size

    152KB

  • MD5

    08a94b1720a17b61cda0b7414d14432d

  • SHA1

    6580fe17709500746f413ddb0f321e7ca640c45a

  • SHA256

    cdf7e74e513d36bdc0462763c89cc34b9a96f9bf1d6831c6473c02cef76b9fb5

  • SHA512

    76cb3c2d55151bfb101cdf1921b549c9e165b2b464658b19ccf1bed24e7b8f32f060921a87e9a8b6478902293224c234ee3d3d2a2598d4008cd5841940fe6bf3

  • SSDEEP

    3072:GsflKbtMfcU2PFOQa81FHoVEhm/NFW9kY0qUOG5teqH8eUxDZQEKhemqE7cGdyni:fflKbWfcU2PF/RoV+m/P4Arc4PMQThvv

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 08a94b1720a17b61cda0b7414d14432d_JaffaCakes118
    .dll regsvr32 windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections