Overview

overview

9

Static

static

9

623a6a4865...18.exe

windows7-x64

9

623a6a4865...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    623a6a486569c3a808005d5ec9a325c0_JaffaCakes118

  • Size

    41KB

  • MD5

    623a6a486569c3a808005d5ec9a325c0

  • SHA1

    9c99561c36a46db84df61484ded3e44c0c832fb6

  • SHA256

    6de0689a21855d5f761bb72688180bd47ee6d01be9f21fb65c337419ee1c94e9

  • SHA512

    c592f3f14cc1b332af16e73311febda56380d8f22f0f246ce16e6b13e89710c5f28cabdcd2fe39b65d6f9117173a7bec01520352dd364dfabb6d5caeb785fe02

  • SSDEEP

    768:cPFT3c16FWv3jErv/tbSyxxY5dUPthCAInyr5h/mugl4M/yTtA51Ev:cPFT5r9bSaYGTplh/mugH/yT2Ev

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 623a6a486569c3a808005d5ec9a325c0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections