@@Pform_u@Finalize
@@Pform_u@Initialize
@@Unzipper@Finalize
@@Unzipper@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_mainform
_pForm
General
-
Target
61950e04b94cf26cfb8abae7ce80d168_JaffaCakes118
-
Size
6.3MB
-
MD5
61950e04b94cf26cfb8abae7ce80d168
-
SHA1
72489036455299909d8db083f00141d9945fe5e5
-
SHA256
c4abb89c40b1b6f271dd638cdc2f289f82c492429032861790fb94aa31e789e3
-
SHA512
cad7d92ca47c0d12fbe4692687e5c4f33db01b5faff6eca3132ac403330aadffbe6c85e52ce3d3883dfd96fbe32a1e83d6d71cca414e94902ed57aa038104de3
-
SSDEEP
196608:VaGsGgRQortxUlX84nrfkCbwLiP9ZT2qB/8zqycBGd5:VaALmwG49wiZzB/CqDa5
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
61950e04b94cf26cfb8abae7ce80d168_JaffaCakes118
Headers
Sections
-
out.upx
Headers
Exports
Sections