General

  • Target

    2d0abfa0fb5aac086ac0efccb079d076_JaffaCakes118

  • Size

    570KB

  • MD5

    2d0abfa0fb5aac086ac0efccb079d076

  • SHA1

    1d5909b1da4ff78021f6b850543db64cebbc9fd1

  • SHA256

    20e4cc904b76e219adf5aed1ac916f2ba6f756c638d986811e8b91b2719dc944

  • SHA512

    25218d768a595a0e1cf20db44bb615ae0def24abbcb7b8bd3192f431cca5af59a1ffa9ce81ee58946b2ee5fea259caaf3d5bc822efa94ba8a6a815cf87651481

  • SSDEEP

    12288:DxGtNMUYKJ6BCdBxfzpLviEEMz51rhK1nIksIJe4Tgz6pB:dGbMUx6BCt7piEpzzrhK9Jekgz6p

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d0abfa0fb5aac086ac0efccb079d076_JaffaCakes118
    .dll regsvr32 windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections