General

  • Target

    1af44756f3ab7f078d7010309db0f269_JaffaCakes118

  • Size

    99KB

  • MD5

    1af44756f3ab7f078d7010309db0f269

  • SHA1

    34ed38840173412b61e63b2cbe1101e14268fd7b

  • SHA256

    c3b7ebed39ba4fa61f5b8acebf2b9bd5644fe093560c7fa6f122d62b8f7d6878

  • SHA512

    c0ffd3ab67db6e8991ab280464f66d745c9897bd785f3b12e45b37fa2d3a5d930b04ed6b7fcaf2d134b7df4235868401a7fde2d7534700f67faf72c787fe2880

  • SSDEEP

    3072:mgQWiY2i9+233kCF9dI3LPAXOXln6ELB4WP3P829V8S4Dhg0fn2J6Z2SLqF+CoVS:mgEw1dILPAX8ln6aB4WP3E29V8S4Dhgd

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 1af44756f3ab7f078d7010309db0f269_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • .rsrc/0/version.txt
  • .rsrc/1033/GROUP_ICON/103
  • .rsrc/1033/ICON/1.ico
  • .rsrc/1033/ICON/2.ico
  • .rsrc/1033/MANIFEST/1
    .xml
  • UPX1
  • [0]
  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections