29f544fb8daf05ed88322cca9cc1da44_JaffaCakes118

General

Target
29f544fb8daf05ed88322cca9cc1da44_JaffaCakes118
Size 8KB
Sample240707-nzh6dateqc
SHA256 fd62ff31008deeedab0ea73219d46c995bcb10916d92b1cbb230a4987465308b
MD5 29f544fb8daf05ed88322cca9cc1da44
SHA1 2504abff4328ef85e1380cde8c28d82bbbb36c10
SHA512 b0ff847e6e62f27c3761ec5a1a8f4b2eefd3bfbee80921cf4cb99b5771807708565cf3d9cae507e38c33b18b55ace0eee5beb291424fb83f0dcfe27d5d2ebb5f
SSDEEP 192:DU8BxgclYO0i+8DwRcM/NOyFaNJhLkwcud2DH9VwGfctlXO:DFBFlR0i+8DE3w2aNJawcudoD7Uy
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29f544fb8daf05ed88322cca9cc1da44_JaffaCakes118

SHA256 fd62ff31008deeedab0ea73219d46c995bcb10916d92b1cbb230a4987465308b
MD5 29f544fb8daf05ed88322cca9cc1da44
SHA1 2504abff4328ef85e1380cde8c28d82bbbb36c10
SHA512 b0ff847e6e62f27c3761ec5a1a8f4b2eefd3bfbee80921cf4cb99b5771807708565cf3d9cae507e38c33b18b55ace0eee5beb291424fb83f0dcfe27d5d2ebb5f
SSDEEP 192:DU8BxgclYO0i+8DwRcM/NOyFaNJhLkwcud2DH9VwGfctlXO:DFBFlR0i+8DE3w2aNJawcudoD7Uy
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

1

Entry point

32544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths