General

  • Target

    a2e4017f2d840ef0ddbe1827db902bd9_JaffaCakes118

  • Size

    149KB

  • MD5

    a2e4017f2d840ef0ddbe1827db902bd9

  • SHA1

    4b711c3a418d6d85d96dadfbead0aaa116ef5316

  • SHA256

    2c8e36e5826efafd49a57a170b8ceb80eec5fc967552515fb561f68168f561e8

  • SHA512

    8472cb5a0f5cb1c53adda27a1333a89fc8423a83a41ccd617967c0c748253c4352dd8a32ed6fec4b720009f10fa7f6d47d0ce42bb2e6dc14f9d78db875fe87f9

  • SSDEEP

    3072:frGRCUDecEf/YACaVRmu/kzQlZic2xGrWfquM8tQWWwLcLtdDebKL/v42:frGMUDMnYArVRkT0rWNuiLc5sWh

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a2e4017f2d840ef0ddbe1827db902bd9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections