General

  • Target

    18e82cce5c180e8c3f2259c8f55f9416_JaffaCakes118

  • Size

    245KB

  • MD5

    18e82cce5c180e8c3f2259c8f55f9416

  • SHA1

    0da64e5d231aab4ed5fac0350df40549ab9098d1

  • SHA256

    f45d5ffe1e1773b69a59a904c49c0846d63217480ac384486e3c292c981f3aaf

  • SHA512

    e5a56d7929eaad14dec80cb199264998910b824f62e8ff6d1b3ee7f311e1d59b3b40473eb8ee449b5bd3b430fb7989d647195be59cc4f6b019af054f7cb1cacb

  • SSDEEP

    6144:Uumi49vFacy0IcQc/l+paHIMzX/VSMwR/P:UVPaHnul+piR8DH

Score
10/10
upx

Malware Config

Signatures

  • Nirsoft 1 IoCs
  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 18e82cce5c180e8c3f2259c8f55f9416_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections