General

  • Target

    b3abb8de36ee79a99652982af2c8faf6_JaffaCakes118

  • Size

    283KB

  • MD5

    b3abb8de36ee79a99652982af2c8faf6

  • SHA1

    e1fc979099f3b4a2debc6a56081264912869941b

  • SHA256

    04ab673bc5046be8b7c5a793f225719e5aa80826e59b8ca6499c5e4f3e91132e

  • SHA512

    8f6e1d428a53823a4003c8081fa22b4e35dffbb0d43b25d1fd3c38b9446d70f38c8f5fdbbeb3a9e90a3fd81d952c509659285b1d6d8c31c7a3fdd943fd63e8f2

  • SSDEEP

    3072:ivnMddxxf2fCy7Ps8V3R7t0/e8E3vO5SxhAanKnHZQTAi:Kl

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b3abb8de36ee79a99652982af2c8faf6_JaffaCakes118
    .exe windows:10 windows x86 arch:x86


    Headers

    Sections