General

  • Target

    ff49ebf9f80b499800d6f2a01f39bfbb_JaffaCakes118

  • Size

    636KB

  • MD5

    ff49ebf9f80b499800d6f2a01f39bfbb

  • SHA1

    25059d3380f2797faed5660ab7f3da667706b585

  • SHA256

    2a8af1362e864ead2c918173b302fedf26459ef33a3d6a3e95b846b135573e6c

  • SHA512

    0b1022cc7e821382dc2b09d518f30d34a791fd620feb6c47e4797019d8e7c39b1b7e9f65981bdd5312c69b2d390a7dc009abe4ab273ca127a3316920c09e8aca

  • SSDEEP

    12288:8jkArEN249AyE/rbaMct4bO2/VwkuL7P33etX4xlPEvdhfWrPjNJj4TFEn79oV7z:vFE//Tct4bOsaL7P3utX4x8qN5XpoV7z

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ff49ebf9f80b499800d6f2a01f39bfbb_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections