5c40c877bab790968d447e42dce108d0_JaffaCakes118

General

Target
5c40c877bab790968d447e42dce108d0_JaffaCakes118
Size 503KB
Sample240719-rdht9svdmn
SHA256 5b2fff916a8f186c3c0e7f0fa7728a0d7690c5696c1a45e94616cc4728afba99
MD5 5c40c877bab790968d447e42dce108d0
SHA1 5e145e58ac116e6806045d4fcbb04cd3786b92a4
SHA512 97f4fe4183c2302af7944f6c1b7924d4f0323892e33b63ab251f0da611480df9cba14da3bb64ec155142836b3c6230282b5cfd75ab09f60f9954607a1f65a6b5
SSDEEP 12288:Hikch8g3INv3t/D9huWdh68evA4WLXoULYd4hhq0F6w4gY8K:PMPy3dD956xAzJhtIwBRK
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c40c877bab790968d447e42dce108d0_JaffaCakes118

SHA256 5b2fff916a8f186c3c0e7f0fa7728a0d7690c5696c1a45e94616cc4728afba99
MD5 5c40c877bab790968d447e42dce108d0
SHA1 5e145e58ac116e6806045d4fcbb04cd3786b92a4
SHA512 97f4fe4183c2302af7944f6c1b7924d4f0323892e33b63ab251f0da611480df9cba14da3bb64ec155142836b3c6230282b5cfd75ab09f60f9954607a1f65a6b5
SSDEEP 12288:Hikch8g3INv3t/D9huWdh68evA4WLXoULYd4hhq0F6w4gY8K:PMPy3dD956xAzJhtIwBRK
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1043856

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths