18c846ecdb639ae8c81c2e409b01170c_JaffaCakes118

General

Target
18c846ecdb639ae8c81c2e409b01170c_JaffaCakes118
Size 190KB
Sample240628-e5fsrstgjr
SHA256 ff29d40c773df55140e41d68a421d5be81f19ba830ea2e943f0a274e1f794449
MD5 18c846ecdb639ae8c81c2e409b01170c
SHA1 c1520f17e7c800c3b38bca3b93a8cd10707fd869
SHA512 3bef175c114450b437653d0b306c7ff1fc69b3d0ef2eb7157bd4f25672ff204db817fa75677c46e0741ea9cf749394fe1c7fdd660f522635f107aba1af7908c2
SSDEEP 1536:ejNdBrhZxyUpYixDlIoapzxUe5UdY779H167O0dxjLy1uLx2WWebh:eNTxJPlepDUw79H1677dxWuoWWE
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18c846ecdb639ae8c81c2e409b01170c_JaffaCakes118

SHA256 ff29d40c773df55140e41d68a421d5be81f19ba830ea2e943f0a274e1f794449
MD5 18c846ecdb639ae8c81c2e409b01170c
SHA1 c1520f17e7c800c3b38bca3b93a8cd10707fd869
SHA512 3bef175c114450b437653d0b306c7ff1fc69b3d0ef2eb7157bd4f25672ff204db817fa75677c46e0741ea9cf749394fe1c7fdd660f522635f107aba1af7908c2
SSDEEP 1536:ejNdBrhZxyUpYixDlIoapzxUe5UdY779H167O0dxjLy1uLx2WWebh:eNTxJPlepDUw79H1677dxWuoWWE
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4240

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths