General

  • Target

    5709a866b191795be8cf577d57b0ebc5_JaffaCakes118

  • Size

    487KB

  • MD5

    5709a866b191795be8cf577d57b0ebc5

  • SHA1

    47e4d89367cf788cfba7e13a2101bef999a67504

  • SHA256

    1ab70f9e27905433788e4b6ba136d01e51397ede1f503e3383536099878f5c04

  • SHA512

    f16611dac7937f6728b4f90fa3300bad41badcca3dceeded9744e2fbfba7102de4bfb42ae6cc6cc2727b5fc9f4411b587191fc66c32c21ee9cacacbed5bce530

  • SSDEEP

    6144:Kv2l6jYT6/1T2NkNL/9U+pFgtgh3rUXvWw1Rrbl18+Im1pFHWwb7P3e3jYOK4Vfl:KvVuEimb9kmhcRrn8KXFn/P3ihHSg

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5709a866b191795be8cf577d57b0ebc5_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections