General

  • Target

    2913a44c8d3d8cf4857a8f49c2409270_JaffaCakes118

  • Size

    37KB

  • MD5

    2913a44c8d3d8cf4857a8f49c2409270

  • SHA1

    379a8f2a300ccfc9b32449b95d659fcc7ba0de43

  • SHA256

    f707e17b27470e8543d3b8268e7d590348867974562a11770c0ef06e8fb0d1b5

  • SHA512

    46a922d6cf4d03c3d78445e7f57db415748bbc7dd1261c42514ce7e33879b3c17b90ceb6228817ca5b6054d2e4817621015bd8b59876cc29f7ca5004f5e681c4

  • SSDEEP

    768:/J+yTgW6EPLcREpOuu89apKMAch5Ak+LKZEKBxp7E/jmlpV4DnWtZzd2:/JLTgWylgMA2Ak+yzpQ/jmlErWtBd2

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2913a44c8d3d8cf4857a8f49c2409270_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections