Overview

overview

8

Static

static

8

a9c29cdded...18.exe

windows7-x64

7

a9c29cdded...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a9c29cdded6fc47299bbb4fad2eb75a9_JaffaCakes118

  • Size

    83KB

  • MD5

    a9c29cdded6fc47299bbb4fad2eb75a9

  • SHA1

    8052bce4c74015bbf7de046d739c028daa043ebd

  • SHA256

    48f0c2756db4295640e11b8a6f2873600f1cc8ec77d40bd2797268ac870bb414

  • SHA512

    2d2da0700d0d1145345bc6029052e6e31a7c37714a97d20665d5e0a4f1487453511cc355031a50dc6d6b6fa88585151184c6cb46d00ce9e94ddcbbd02162086b

  • SSDEEP

    1536:+k0B6h6I9de5QS+erSAaNRTW6gBzHr4GUZOosvyn8cP4ZFlyRPjB70UmRlpH:ztomdsrNKTWaGUZO/RcJRPJCRn

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a9c29cdded6fc47299bbb4fad2eb75a9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections