f05290862fde867cfaad81d4be571636_JaffaCakes118

General

Target
f05290862fde867cfaad81d4be571636_JaffaCakes118
Size 2.4MB
Sample240415-e8qr5sef67
SHA256 e9e64099c15c6850b94c2603fbdd740590e4aadca95ac03bb76c11a1969d9ae1
MD5 f05290862fde867cfaad81d4be571636
SHA1 403ff7bdf6597b64b253bc962e27033aed66d406
SHA512 d3a355787d432d5fff35211cfe74cb8d1413a1fda828b98710796a038ce3412ca444e46c3b059b56081b8a46b0f515154bd66fdcb6b95322f7ae9fdda0b9168c
SSDEEP 49152:7CdW+NIRVRT111findksB10gI5h0kRKZg19awdDWNMQr5VmY2NQn8G7mKWteskA:7WtIxT11cGsBYFKm10wZWNKtVcmKikA
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f05290862fde867cfaad81d4be571636_JaffaCakes118

SHA256 e9e64099c15c6850b94c2603fbdd740590e4aadca95ac03bb76c11a1969d9ae1
MD5 f05290862fde867cfaad81d4be571636
SHA1 403ff7bdf6597b64b253bc962e27033aed66d406
SHA512 d3a355787d432d5fff35211cfe74cb8d1413a1fda828b98710796a038ce3412ca444e46c3b059b56081b8a46b0f515154bd66fdcb6b95322f7ae9fdda0b9168c
SSDEEP 49152:7CdW+NIRVRT111findksB10gI5h0kRKZg19awdDWNMQr5VmY2NQn8G7mKWteskA:7WtIxT11cGsBYFKm10wZWNKtVcmKikA
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5506416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths