General

  • Target

    2235d362825b35b916c65978976d6701_JaffaCakes118

  • Size

    79KB

  • MD5

    2235d362825b35b916c65978976d6701

  • SHA1

    c1d13ca4c04f89ee407373e2e33dfe2376bd105f

  • SHA256

    074e162bf0bcd2ca812dbbdbf39003c3d9acf2dc2c5e9068db03767442b050bc

  • SHA512

    15c60aa496df2f234b1207a9755155f3f8a7e36f08b3c3a11061a393d6947f7f9bb5e55eb0922731146b6e1992291239eeb4d23aa8322216dc7cc32d919519c1

  • SSDEEP

    1536:KiaBKA+ik1sYjIKeYBqGfEXm3ncIRCSPaIw/XJ:+BIB1sYczGfdcIpK

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 2235d362825b35b916c65978976d6701_JaffaCakes118
    .rar
  • ip-patch.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • unlocker.dll
    .dll windows:4 windows x86 arch:x86

    5a8d2b38ef8832b1bfb7732d97d78ec6


    Headers

    Imports

    Exports

    Sections

  • unlocker.exe
    .exe windows:4 windows x86 arch:x86

    6d51ff186ff9fc1e4fbe4ad5e309dff8


    Headers

    Imports

    Exports

    Sections