ebcae4d26e09b647bbd0bc4e0e3b56a1_JaffaCakes118

General

Target
ebcae4d26e09b647bbd0bc4e0e3b56a1_JaffaCakes118
Size 10KB
Sample240410-xxrt6sha74
SHA256 35a40df18208e87c42d63b3ae8b45839529b48903c7cf843a2ae42fdaa7e6bd6
MD5 ebcae4d26e09b647bbd0bc4e0e3b56a1
SHA1 367a36eb4d3196477477108d129a33f33c0af914
SHA512 57a66b66f1e2a28b7bfd1c24b58da5ef6bd773c8e7a3f9461490b31170cfff9308564cfc6c04eb9a0f693a96bb37e8d702fe3e7f503f23b9eeb5e8cdad38462f
SSDEEP 192:fKMb6laJXPwmBh3koHjjsKA4tihs0eCbqZn7oJwOJ684zjMvs2UZuE0:C0xPxBFjHA4guZn7tb8H7f
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebcae4d26e09b647bbd0bc4e0e3b56a1_JaffaCakes118

SHA256 35a40df18208e87c42d63b3ae8b45839529b48903c7cf843a2ae42fdaa7e6bd6
MD5 ebcae4d26e09b647bbd0bc4e0e3b56a1
SHA1 367a36eb4d3196477477108d129a33f33c0af914
SHA512 57a66b66f1e2a28b7bfd1c24b58da5ef6bd773c8e7a3f9461490b31170cfff9308564cfc6c04eb9a0f693a96bb37e8d702fe3e7f503f23b9eeb5e8cdad38462f
SSDEEP 192:fKMb6laJXPwmBh3koHjjsKA4tihs0eCbqZn7oJwOJ684zjMvs2UZuE0:C0xPxBFjHA4guZn7tb8H7f
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

28944

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths