General

  • Target

    d1bf4f47ed8362d91e94cd7253972f87_JaffaCakes118

  • Size

    36KB

  • MD5

    d1bf4f47ed8362d91e94cd7253972f87

  • SHA1

    6fce230ba4180d8dfd43b30ac8f466e4e3599e0e

  • SHA256

    2ecffb39c3be9cedcb7c80212fb736c7410400ff4195cbf5e797c587c100ef77

  • SHA512

    dc07acdb12fc393fcb8650e085134ba3856268b2771496d094b20a06721f21186f4f33154dc002d3e2fb152911eb2779c4782f6b2e6c416678c13c3d5d664a24

  • SSDEEP

    768:W4kJZE/wypGtdHzWdBqAOdRNJsks1vlrJ:W4kJWj4HzCIjNY1

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d1bf4f47ed8362d91e94cd7253972f87_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections