eda72a732308c90c3bdd582715e13b23_JaffaCakes118

General

Target
eda72a732308c90c3bdd582715e13b23_JaffaCakes118
Size 3.1MB
Sample240411-rye9wade24
SHA256 52071f5178a1c3d436f8178a80e6c3fdea4f1c4c185c614ac2576be2415c53c6
MD5 eda72a732308c90c3bdd582715e13b23
SHA1 69dddf32d2eac4ebff44a5de3db559e4b3e1f9ca
SHA512 d94abffd240cbae7cf9a14a3294d234bf474b02e7dd8e5b63ea5674611dbd86bd06ed35128cc521dd6fdcbefab7891a10566416006f76a86a1b5d76a29d0888d
SSDEEP 98304:WdNIA2b8lIpIta0Icq+KPtYulORjiCSHwdlPtqM7RcS4FIKU21IEfrNdSf8H:WdNB4ianUstYuUR2CSHsVP8H
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eda72a732308c90c3bdd582715e13b23_JaffaCakes118

SHA256 52071f5178a1c3d436f8178a80e6c3fdea4f1c4c185c614ac2576be2415c53c6
MD5 eda72a732308c90c3bdd582715e13b23
SHA1 69dddf32d2eac4ebff44a5de3db559e4b3e1f9ca
SHA512 d94abffd240cbae7cf9a14a3294d234bf474b02e7dd8e5b63ea5674611dbd86bd06ed35128cc521dd6fdcbefab7891a10566416006f76a86a1b5d76a29d0888d
SSDEEP 98304:WdNIA2b8lIpIta0Icq+KPtYulORjiCSHwdlPtqM7RcS4FIKU21IEfrNdSf8H:WdNB4ianUstYuUR2CSHsVP8H
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7977792

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths