f423e4da4814af3f0a2e85deede8546c_JaffaCakes118

General

Target
f423e4da4814af3f0a2e85deede8546c_JaffaCakes118
Size 3.1MB
Sample240416-xt892sbf6w
SHA256 adfe6558bd5a1a7daec955583a619308369d3c9d400b8f99d3400e0792227d8b
MD5 f423e4da4814af3f0a2e85deede8546c
SHA1 0d9d30ce5fdda6dac9b616b6e468db8af44e34b1
SHA512 8bfac9aa115fd18883c62fb9840c3a67d55c84e496a5be889e1fededc8890cb3c09780164761b23c9afa248bc820d9e27fda4c53c311360ab40a7f1ca9670881
SSDEEP 98304:8dNIA2b8lIpIta0Icq+KPtYulORjiCSHwdlPtqM7RcS4FIKU21IEfrNdSf8h:8dNB4ianUstYuUR2CSHsVP8h
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f423e4da4814af3f0a2e85deede8546c_JaffaCakes118

SHA256 adfe6558bd5a1a7daec955583a619308369d3c9d400b8f99d3400e0792227d8b
MD5 f423e4da4814af3f0a2e85deede8546c
SHA1 0d9d30ce5fdda6dac9b616b6e468db8af44e34b1
SHA512 8bfac9aa115fd18883c62fb9840c3a67d55c84e496a5be889e1fededc8890cb3c09780164761b23c9afa248bc820d9e27fda4c53c311360ab40a7f1ca9670881
SSDEEP 98304:8dNIA2b8lIpIta0Icq+KPtYulORjiCSHwdlPtqM7RcS4FIKU21IEfrNdSf8h:8dNB4ianUstYuUR2CSHsVP8h
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7977792

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths