General

  • Target

    3918b04b80fd89e2f846c9d787c6db2a_JaffaCakes118

  • Size

    31KB

  • MD5

    3918b04b80fd89e2f846c9d787c6db2a

  • SHA1

    f152c3e999cb8199d47f41694909cea128eb985b

  • SHA256

    bffa01209990d30c15caba4214838c1c27fddf01d84a1cac6c0fe721a51535bb

  • SHA512

    87f1491ed39ec789f80bf5cbc2db5c840e66eb9eed4e0c30a394be3dbb1250f84024f0c0c97fc583d2322ecbab6aff56692773c67ae65275cecd16e88ebcfdf1

  • SSDEEP

    768:uJ7T7J0epYxtw6I/27FO//tb/l4/NNFB2Fn:uVT75cON/Ra/NNFB2Fn

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3918b04b80fd89e2f846c9d787c6db2a_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections