General

  • Target

    b5520062bda4656d1c4f62e96ca6b4f0_JaffaCakes118

  • Size

    126KB

  • MD5

    b5520062bda4656d1c4f62e96ca6b4f0

  • SHA1

    b4b7d9387469aafb1dbc9be5e9cbd6925e318ce5

  • SHA256

    edaf4a449a62c9c39a18a2086d589ac866bd0d48b0c7c00bf11122fe8ff4d9aa

  • SHA512

    5ef7e67d746a3701a0141ed24896f84a25173857c938dc6a8bb693d4cef65b2b4f2bcac6346cea8e8c6840ca122d0c765f684507a6e92c133d08e2bce84de22b

  • SSDEEP

    3072:I4nO8cG+6jQtnj6YGs9CMbOw6BnaVMrckIc:I4O8cG+64tNgMqdaW

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b5520062bda4656d1c4f62e96ca6b4f0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections