75bc13bc57b2457decb25520e41ea6ef_JaffaCakes118

Sharing

Target

75bc13bc57b2457decb25520e41ea6ef_JaffaCakes118
Size

123KB
MD5

75bc13bc57b2457decb25520e41ea6ef
SHA1

b7cc39f4157639c67dd590d1280fb453aa786d67
SHA256

5637dc86e1b2224490afd6913c6c635bf1299bc2e34c68a5d8ad78518a0e2bb7
SHA512

d460870a6fe118c38c025c3d0a25369acee773100b7c403ff941d8000250e638b5498d741513029c36a6c3270580df3a6cc8f40228a8961fe37bf8862e2c178e
SSDEEP

3072:z9zGtctDwi76tAAenLGaMvG+cg+Ofw5ubi4L9:VYeDwAoAxnLGXG+15fwUm4L9

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/Alchemy.Mindworks.Electronic.Greeting.Card.Construction.Set.v2.0a20.Incl.Keygen-Lz0/Keygen.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Alchemy.Mindworks.Electronic.Greeting.Card.Construction.Set.v2.0a20.Incl.Keygen-Lz0/Keygen.exe

75bc13bc57b2457decb25520e41ea6ef_JaffaCakes118
.zip
Alchemy.Mindworks.Electronic.Greeting.Card.Construction.Set.v2.0a20.Incl.Keygen-Lz0/Keygen.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 212KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Alchemy.Mindworks.Electronic.Greeting.Card.Construction.Set.v2.0a20.Incl.Keygen-Lz0/file_id.diz
Alchemy.Mindworks.Electronic.Greeting.Card.Construction.Set.v2.0a20.Incl.Keygen-Lz0/lz0.nfo
keygen.nfo