General
-
Target
d3dc7bddccba42692c4cf8e5cfc6fb0f_JaffaCakes118
-
Size
225KB
-
MD5
d3dc7bddccba42692c4cf8e5cfc6fb0f
-
SHA1
507b2ebc1729f7b255cccf4c6319e5a4723f5943
-
SHA256
ced6143085ee90e364878120d5d314349838f99bb5e5cbce509c8cffc0ec4fcd
-
SHA512
1de54e04bbf3a048c38420d2b7864a3b9b8a12eb09fd9bfad6ab206c4f6143c49dcb94e5e33d22eae01e284b07e79dbd9127d26cdf38cad253209084d4175ea2
-
SSDEEP
3072:LuDJTouvYCuuk0B0wqRKpJVivx1utX4fJDhq6mtHCcAA4AnK7LPdlu3jzFWsRWye:ch2uFB9o2X4fJDhnmAA4jPGTRRNe
Score
9/10
Malware Config
Signatures
-
Detected Nirsoft tools 1 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
d3dc7bddccba42692c4cf8e5cfc6fb0f_JaffaCakes118
Headers
Sections
-
out.upx
Headers
Sections