General

  • Target

    16ef3c9786c48c5051634cce9023c965_JaffaCakes118

  • Size

    191KB

  • MD5

    16ef3c9786c48c5051634cce9023c965

  • SHA1

    6c27c67d65e6ecd4517798709c18d98742256dee

  • SHA256

    e1ae73c0a9a8f6121360da811283913e39df6a201dbe7bf9705be99c5a6b5c62

  • SHA512

    6befc69f3ad3b57e1c343ceede999819e291af3209e9ee742b857f6229d4afea2501c4e78b4ecdc9b21a201d1d2d93821af91c5fa0cae578d3213776daccc87f

  • SSDEEP

    3072:SBtP6wEYGpRfiaSXRC/JzoROOlt0ztbSYkn2frED5rUPP5s:2rEvfmY/qBlGzQ7ArMm

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 16ef3c9786c48c5051634cce9023c965_JaffaCakes118
    .dll regsvr32 windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections