General

  • Target

    4b2bab8ff5fa0828bacb8b8686489177_JaffaCakes118

  • Size

    411KB

  • MD5

    4b2bab8ff5fa0828bacb8b8686489177

  • SHA1

    7377666d015a467dd0f122393ed455f9111cd020

  • SHA256

    3d8706b5636fb98d574df88f91a05564acfe75efff7fb5cf47f729b21f3239be

  • SHA512

    929d533f77867adaeff162edbb6ced333b0c5af4217ff581cf9c4e29732719fcaaa9127a359740c2b7d93140dc4ea6e7fda195c3a452c5a0804e531a631fa7ff

  • SSDEEP

    12288:Rrq5I+41dLZQKvtg7j+W/kQBdaowgEqmsFBITB07pFCaG5BDHVi:R+5IJD9QKG7jn1/CtqmsnITB0tfGT4

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b2bab8ff5fa0828bacb8b8686489177_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections