General

  • Target

    5af6b376e660805759683865437acbc0_JaffaCakes118

  • Size

    35KB

  • MD5

    5af6b376e660805759683865437acbc0

  • SHA1

    75f61ab72f67c53553ef87c655777c430c3c91c2

  • SHA256

    f0cf25602f19d5b2f2c0050180815eb5c727427142639fa1c177b5d1dc078a1b

  • SHA512

    faf2750a1dcfa6bbac2fc0162f14977ac7b145fe4361e58e880ac727902fc90afe1e92c7107c5096050c2e8a5dae1aab322c84851fbd30542f35e6e846d16e63

  • SSDEEP

    768:/+5WLaO2wpBorkucMMqyv+czNsmj+KN7mODgDsEhahV:25WLaf7rkucMMqT+UKcirr

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5af6b376e660805759683865437acbc0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections