General

  • Target

    a123c9f191e55448b1084db6f42211d3_JaffaCakes118

  • Size

    34KB

  • MD5

    a123c9f191e55448b1084db6f42211d3

  • SHA1

    f74b36c56eca6be3c2970935995f69bfe8e26f98

  • SHA256

    3dfe3081656e8e59bdc17aed8f6c7493ad9a5d6a70f0d638005d55678d972147

  • SHA512

    5ebd4947cce3721c60a53a27bdaa84891080eb8f3377972ded99b99c2cc67bfe6e05f253ef75a0691c9b67d86d30a1285cae49f7fb9ecbf28d00fee6999a72f6

  • SSDEEP

    768:T3Imn5zcYO3XUxIpcJmy56rfSPx1xTmXK9sjtHJ/Ssz3N8r:rIUzHOnUxIyJmy86P39GMEtJEr

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a123c9f191e55448b1084db6f42211d3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections