General

  • Target
    b67456ee8a25ac8f6263764001b41309_JaffaCakes118
  • Size 375KB
  • Sample240617-dedeaa1cqc
  • SHA256 0ebf391c780d4c30b478e343baecb2db0ab303a17e77bac67d3930c55a87a68a
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

File Explorer

  • b67456ee8a25ac8f6263764001b41309_JaffaCakes118
    .exe 375KB

b67456ee8a25ac8f6263764001b41309_JaffaCakes118

  • SHA256 0ebf391c780d4c30b478e343baecb2db0ab303a17e77bac67d3930c55a87a68a
  • MD5 SHA1 SHA512 SSDEEP
  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
Digest
80:af:0d:3d:ef:45:f9:dc:fa:96:61:4c:51:85:27:d8:f7:d7:0a:94:18:39:01:a0:ba:1c:b4:1b:83:84:a7:70
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=上海广乐网络科技有限公司,OU=技术,O=上海广乐网络科技有限公司,L=上海,ST=上海,C=CN

PE Signature issue

Digest
12:3e:14:b7:db:61:1d:49:2c:c4:b7:15:c6:31:24:83:22:b0:32:df
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=上海广乐网络科技有限公司,OU=技术,O=上海广乐网络科技有限公司,L=上海,ST=上海,C=CN
Chains

Sep 12, 2019

Minor OS version
0
Major OS version
4
Entry point
950752
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths