c0345119b970a652dc1ccf61eee2afad_JaffaCakes118

General

Target
c0345119b970a652dc1ccf61eee2afad_JaffaCakes118
Size 461KB
Sample240825-hwlt7sshqk
SHA256 235b0db0ef43b907b180db2ebeb12a65377612606c1c9d1a3cacef4b0a20f7a1
MD5 c0345119b970a652dc1ccf61eee2afad
SHA1 18f6cfa3fd4cd7ece53c24eaeb49fa0d03bfc60a
SHA512 a5f5890722d5c0f852e90b31359d445e4f03fac23cc793deb2b10c560d8e3dd754c710fa3a3668fd47c21ef5073ab76c80c75421631c633f56b4293a22df1a4b
SSDEEP 12288:VvUGNDMRh6cLVLQ3tw0D/v9p5jk1F6YFBzwmEyoARBbzZs:eh6chYus9g3r7zwlyoc9y
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0345119b970a652dc1ccf61eee2afad_JaffaCakes118

SHA256 235b0db0ef43b907b180db2ebeb12a65377612606c1c9d1a3cacef4b0a20f7a1
MD5 c0345119b970a652dc1ccf61eee2afad
SHA1 18f6cfa3fd4cd7ece53c24eaeb49fa0d03bfc60a
SHA512 a5f5890722d5c0f852e90b31359d445e4f03fac23cc793deb2b10c560d8e3dd754c710fa3a3668fd47c21ef5073ab76c80c75421631c633f56b4293a22df1a4b
SSDEEP 12288:VvUGNDMRh6cLVLQ3tw0D/v9p5jk1F6YFBzwmEyoARBbzZs:eh6chYus9g3r7zwlyoc9y
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

1517888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths