@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook
General
-
Target
af210c2053d39940dc6d5b247b073961_JaffaCakes118
-
Size
72KB
-
MD5
af210c2053d39940dc6d5b247b073961
-
SHA1
d1eb84275994f11bc6a786eee1881a91994ff40e
-
SHA256
c2e0bc03d7fa7f92f6be732b2da7305b856ffffb9da86c2906472361dff62508
-
SHA512
5ae53a3bce9762184796fecb578d8aae766ffffe9707ec0020b553ef0b0431e32717041fb68d40cf21cb75a3d1e5b1e570478d0bac6fc33c2ed85c3315c249c5
-
SSDEEP
1536:WL4TuMuN6g99lJ+U7+F6C3B3GyVU4i8MyJfovvj7P7RIOzOQO:WUTuMuNDVJ+Uu6gVVUeJSfVIOz6
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
af210c2053d39940dc6d5b247b073961_JaffaCakes118
Headers
Sections
-
out.upx
Headers
Exports
Sections