General

  • Target

    5a438f30882d2595229be26c5d4576e5_JaffaCakes118

  • Size

    35KB

  • MD5

    5a438f30882d2595229be26c5d4576e5

  • SHA1

    d3af8c3cb31d13da4298ce11a874bdb22dddaa4a

  • SHA256

    e4a17446c490006f45a4b3df93fba298fa20401a28267819976fec2b2d3cb083

  • SHA512

    0dcc759c8933049fb4c38dd5e2fe4c67e8852216a5af3b750ce715e6f0d2a03136e6e905980ed26e31775d6f8878f7fc6eb6104d8305aea09963cc648894f7a4

  • SSDEEP

    768:qiB0UHyaxvwsf/InosKmfWqm4Lbmq2J+0XugN:qiBRSaSohq3fmN+Iug

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5a438f30882d2595229be26c5d4576e5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections