bd8b5e0c4bf0e9b3c05cbc3f3f3dcdbc_JaffaCakes118

General

Target
bd8b5e0c4bf0e9b3c05cbc3f3f3dcdbc_JaffaCakes118
Size 224KB
Sample240404-vdflpach5z
SHA256 7b55e778c83e02e55449867102dd7389192b2ce6bdceb5c5a5a00d420a67591c
MD5 bd8b5e0c4bf0e9b3c05cbc3f3f3dcdbc
SHA1 44fb87e3e931dc55922866e9825054e730154fe9
SHA512 e46f23dfac5193434caf065c5b31772b682caa2ad0983a8caad6ad13f742f8991d7181b9e143f4c9a7973dbc2f7a266528ca550b585be6c3fe8ac158903a04d0
SSDEEP 3072:vHjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1jm0+J:Po/BHng5HaVG4G/1z+QVMbg1jv+
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd8b5e0c4bf0e9b3c05cbc3f3f3dcdbc_JaffaCakes118

SHA256 7b55e778c83e02e55449867102dd7389192b2ce6bdceb5c5a5a00d420a67591c
MD5 bd8b5e0c4bf0e9b3c05cbc3f3f3dcdbc
SHA1 44fb87e3e931dc55922866e9825054e730154fe9
SHA512 e46f23dfac5193434caf065c5b31772b682caa2ad0983a8caad6ad13f742f8991d7181b9e143f4c9a7973dbc2f7a266528ca550b585be6c3fe8ac158903a04d0
SSDEEP 3072:vHjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1jm0+J:Po/BHng5HaVG4G/1z+QVMbg1jv+
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4724

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths