jaffacakes118__93605ace2301ed8fbacc7127ebc17d41

General

Target
jaffacakes118__93605ace2301ed8fbacc7127ebc17d41
Size 37KB
Sample260919-pta39ack4x
SHA256 55d5a9ccd4c59bf1e8375fe9693c6a2ba59408ccf844a7921c25938d24de752d
MD5 93605ace2301ed8fbacc7127ebc17d41
SHA1 a7e9789e81fe7fcc99205c4a5cc6e3105277b1d1
SHA512 9774f790e428553011fac816f24f9a12abc3841f497e455033cfcbd5e6d9c8fc1a50c252591618ab790c9cd160d0fbec879ea3f456056fbb52b0fdde50514b33
SSDEEP 768:rU8hnYATCGWuCh7UOTwDpzBrl7R+M2e1Cmy4Wt1H8W1VUaLi+hPnja:rUuPCNVO9Bl7Ue8m9s1dRuG/j
TLSH
T1B003F1FBAB2910D3D663093267C1572C71B4E56403623BE1F78330E7A2372A25AAE4C5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__93605ace2301ed8fbacc7127ebc17d41
unpack001/out.upx

File Explorer

jaffacakes118__93605ace2301ed8fbacc7127ebc17d41

.dll 37KB
out.upx

.dll 94KB

jaffacakes118__93605ace2301ed8fbacc7127ebc17d41

SHA256 55d5a9ccd4c59bf1e8375fe9693c6a2ba59408ccf844a7921c25938d24de752d
MD5 93605ace2301ed8fbacc7127ebc17d41
SHA1 a7e9789e81fe7fcc99205c4a5cc6e3105277b1d1
SHA512 9774f790e428553011fac816f24f9a12abc3841f497e455033cfcbd5e6d9c8fc1a50c252591618ab790c9cd160d0fbec879ea3f456056fbb52b0fdde50514b33
SSDEEP 768:rU8hnYATCGWuCh7UOTwDpzBrl7R+M2e1Cmy4Wt1H8W1VUaLi+hPnja:rUuPCNVO9Bl7Ue8m9s1dRuG/j
TLSH
T1B003F1FBAB2910D3D663093267C1572C71B4E56403623BE1F78330E7A2372A25AAE4C5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

129536

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

out.upx

SHA256 97f0d1843fdc125e98387613a8b7653c4b7b950559a975687ae03ca957a7f8af
MD5 eb7f5712dd4a5afaf35811555de05620
SHA1 fbc6d65a65d08285e5df532dea714cf3f72a99c5
SHA512 9b50fed44294f0bfbc2d3ff871cb33561d673f0e950575ad3d4d61fda6d96c83d27fc1e0194d62ed69670d9b0c37d3665140ff24a3d0f1aa39ad94040f6d1d70
SSDEEP 1536:8qTLbc9fz4xfHz2PGCNQKFHCL8AjOpBlckEX81z0Er:n3bc9fz4xmvHCRLkEXWz00
TLSH
T1BC9307BAF582D433D02459BD8C0FC1D5A22C76353E34686BB5EA0F2DD8B92C2696D1C7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

87604

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

jaffacakes118__93605ace2301ed8fbacc7127ebc17d41

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__93605ace2301ed8fbacc7127ebc17d41

generic

out.upx

generic