General

  • Target

    0fbeef6dee3c7e1ed4dd8a39c63adf17_JaffaCakes118

  • Size

    108KB

  • MD5

    0fbeef6dee3c7e1ed4dd8a39c63adf17

  • SHA1

    00c2598bca6a7925a1fae028bf6ad87ba2fe6234

  • SHA256

    960e8db8dde20764642e897be2dcf54fe541a51537a3bf05a5b2b0efc4ef32d3

  • SHA512

    d39a0ade8b13a1393bc011ae09cfd44fba0445bb65a56b87b8c2c7b131aa5acc58e66182004ccf3af4eb728100ea7f219485fca9157094b445eecfdc16da193f

  • SSDEEP

    3072:ZgQWi92i9+233kCF9dI3LPAXOXln6ELB4WP3P829V8S4Dhg0fn2J6Z2SLqF+C4Vf:ZgLw1dILPAX8ln6aB4WP3E29V8S4DhgO

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 0fbeef6dee3c7e1ed4dd8a39c63adf17_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections