a6ec67fd576278638dd92cb6a74ede13_JaffaCakes118

General

Target
a6ec67fd576278638dd92cb6a74ede13_JaffaCakes118
Size 83KB
Sample240613-2jp6mstarf
SHA256 05a5d69f79b5d8f7e855909ef1f9a505f617c0e4e30ffdc9e3b830196cd7c76c
MD5 a6ec67fd576278638dd92cb6a74ede13
SHA1 53384111ef4a6d5040ad84fc6462e6e462b008d4
SHA512 9ab76f7918d5ff665df35301f81a6c9e6a1c98ab7aba6c00bb7180993103f1207040aa2d6131456d696e4590fd628fcf131236f9df83f4553c91130a1e5bc6e9
SSDEEP 1536:y/qb2DdRBC+etMBneXD78JNsPoN2WCdXCIjncfXOjtN2d/YJZMGr9Ch:yycs+XBeXP8JNsPoNYZCITcGjtY+3rgh
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/unl-hitmanbm.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/unl-hitmanbm.exe

SHA256 05a5d69f79b5d8f7e855909ef1f9a505f617c0e4e30ffdc9e3b830196cd7c76c
MD5 a6ec67fd576278638dd92cb6a74ede13
SHA1 53384111ef4a6d5040ad84fc6462e6e462b008d4
SHA512 9ab76f7918d5ff665df35301f81a6c9e6a1c98ab7aba6c00bb7180993103f1207040aa2d6131456d696e4590fd628fcf131236f9df83f4553c91130a1e5bc6e9
SSDEEP 1536:y/qb2DdRBC+etMBneXD78JNsPoN2WCdXCIjncfXOjtN2d/YJZMGr9Ch:yycs+XBeXP8JNsPoNYZCITcGjtY+3rgh
MD5 SHA1 SHA512 SSDEEP

SHA256 200521127427dc43a7127ca6def398952ca30aeb64c24f53b954f576bcc1a004
MD5 598e838a06f12932d054718ef03b5ce1
SHA1 011ca28e73d62cb36b23fba47f463e2fb6cd7d6e
SHA512 7e4e785dc9caff43d8776a3c8274251f5a01d9c2f3ab609c37aa48157712201b6bcb04ada303ca332ed5a0ac1075a534db8a435f15a9f79a050a6a9fbc42350b
SSDEEP 1536:5JQDpWRWjqXEbfgWS+njEVqx37Wqcr2FBD7CsNiFhX:LQFWRkMEDgWSiyO37WvsO
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

718384

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths