General

  • Target

    2bd540557b7dc7b31e437818b1d2b2e8_JaffaCakes118

  • Size

    65KB

  • MD5

    2bd540557b7dc7b31e437818b1d2b2e8

  • SHA1

    899cfb881c167ad8040777a102fa28f0306e2ca8

  • SHA256

    5da0b580cf0adb8d9c12ea778434fffe6d5144b45948d0689e9815008339cf2b

  • SHA512

    cde34554fdccff5c8c27460538f98677a3c4f34a1ca24a942d953cce7d9626a6e5df41e03ad5b0808159e2ecb61aa3be63f863c450314f8458eb9ea865860e28

  • SSDEEP

    1536:HocFzS6xPU4MNkdYjNkZ7cr9DDex+CPZkZTNmNGhob:VzSMqkYjN8m9OxAXwkob

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2bd540557b7dc7b31e437818b1d2b2e8_JaffaCakes118
    .dll .hta regsvr32 windows:5 windows x86 arch:x86 polyglot


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections