General
-
Target
41ba112d61481c7ab9a469706ed9525a_JaffaCakes118
-
Size
52KB
-
MD5
41ba112d61481c7ab9a469706ed9525a
-
SHA1
f13e62df9a3d6e9d1ec2d83305cbb09e2bb8405d
-
SHA256
1c4c30f7033c33dff3ba4f9ac9a823621ba0d14fb3718d5b55aa6db0171c2610
-
SHA512
7850de9b617fb8901947a18d44e448af8d966c593ed17cb4fbea8e9fda6be5532c974c2d1ecd6fba47e74e6ab72e29271ccf8f04371c3274e94921ed60c388ef
-
SSDEEP
768:OXlDxVg2LypX0oi9RU8ZtsfDF2sjOxoY6iJyQlDrDJPVynrFAiPUPcTPzG:OS2UEpR7ZKF2cOtBpPVyhAlB
Score
9/10
Malware Config
Signatures
-
Detected Nirsoft tools 1 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
41ba112d61481c7ab9a469706ed9525a_JaffaCakes118
Headers
Sections
-
out.upx
Headers
Sections