General

  • Target

    846efb27f4d6fbc783b60f2877dedc70_JaffaCakes118

  • Size

    52KB

  • MD5

    846efb27f4d6fbc783b60f2877dedc70

  • SHA1

    c78a6ccb4fb985ffec17ecd08e4bad41f7103c3f

  • SHA256

    f4b74a7d8beb4279a536de863d94a242b0e817a2386905aca61459e2012ff804

  • SHA512

    cf49dce1371206d8bbc883b9b13ad1e851c2b471ab004dc902449361d5e120f6061a0dd7f1eb9e9d622ab44ec566b66153c8e3dccbddb7b5aa75c24e22a2e1e2

  • SSDEEP

    768:8sFuesK5QHJkeG+8fAPQbanAtYx8AluqM4rV7aK:8besKaG+8Knj8oXrV+K

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 846efb27f4d6fbc783b60f2877dedc70_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections