General

  • Target

    861867764934b468d59be85f934488f9_JaffaCakes118

  • Size

    545KB

  • MD5

    861867764934b468d59be85f934488f9

  • SHA1

    3eb79385019093b5c608b22615490613edbf2318

  • SHA256

    582fb7c8eb1ad31dd8d1faf79aab12e73345510aef12ced03d644e7e31469cad

  • SHA512

    275814ffc04b864be7c41b52dd3a80e5a41f0daf78987e6cd92876ec7f0a1f7cd4276c1be19042651a789a2ff1007b83c4d6655647f36436e8d2fa287bbe950c

  • SSDEEP

    12288:k3wGORQ8K7NkbXaBsn1x+ylZgx3yO/IF3rSPnY0woY7HC8WlDG3rf:k3wlRNDSyDgx3yLYY0wbi8WZG7

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 861867764934b468d59be85f934488f9_JaffaCakes118
    .zip
  • NukTool/NukTool.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ʹ˵.txt
  • װؿ.txt
  • .url