General

  • Target

    129e409e4b18cbbee4241ee461bcad25_JaffaCakes118

  • Size

    576KB

  • MD5

    129e409e4b18cbbee4241ee461bcad25

  • SHA1

    c932cd873bb37f3f1d2959b848c67fc344a9d092

  • SHA256

    619242f828d1c90595587ddab9ad3890f93b96b0723e419960d58d90091826d1

  • SHA512

    9130bf13682fe0a60dfb4a6f2b8a2d8835af789815daa41d81756c9582e97e1c85b2d50abd8e7053e9d9289aa7a816d5e12c3b5a03678ff6baac402171c3e65a

  • SSDEEP

    12288:0VXR/bkJ2u36I9t0mwShEqIQH063+U8XKERkjXr8qWYNGpe/sNL7ZfB:aXR/bw2u36g0vave6KKjXwqWYNGI8tB

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 129e409e4b18cbbee4241ee461bcad25_JaffaCakes118
    .zip
  • Microsoft_Update.img
    .iso
  • Microsoft_Upgrade.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections