General

  • Target

    c1a61eb66b243dbe616a5ecdd741c0f7_JaffaCakes118

  • Size

    127KB

  • MD5

    c1a61eb66b243dbe616a5ecdd741c0f7

  • SHA1

    fea57c45910eadb888da668aa937ab0a111fa448

  • SHA256

    41d69ff3947b8676056f7ec22bce72b3064ae39baa366b4b8ba21deb5e6d5295

  • SHA512

    e32c3e365475d373767c18536bcbc738eb7a2bf69ed516d86b05f22d1aac72b86326d28167b4ee291f11c7a3fc7a2027d99d69d962b44c07ddb6a70b9a7c60bb

  • SSDEEP

    3072:ZgQWi92i9+233kCF9dI3LPAXOXln6ELB4WP3P829V8S4Dhg0fn2J6Z2SLqF+C4VA:ZgLw1dILPAX8ln6aB4WP3E29V8S4DhgV

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • c1a61eb66b243dbe616a5ecdd741c0f7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections