General

  • Target

    d64aac9ddf528b8549dab4cdb895bcb4_JaffaCakes118

  • Size

    145KB

  • MD5

    d64aac9ddf528b8549dab4cdb895bcb4

  • SHA1

    539eab2782fdc07e6fe3974fcb1003413ebcd5a2

  • SHA256

    f4a3ef4b32970c619c1e95116dfe433752c849371b7fcc17726fba7f1d60aadf

  • SHA512

    a84ab343920e027f2e3afebbc0e2764ad3f9826654e98f322221134e2e5f1087cbdddcb582dc3cdb854a3bbc6e420238f5ca478e5914d815c314676804bcf0ee

  • SSDEEP

    1536:N/fyqCMzmEkk9f7g0c85+wdn7j7OtanyICS4AMs9LaiLasyfGVZXcZ0W:NiqCMF/L35+wdnH77nROzlsQGE6W

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d64aac9ddf528b8549dab4cdb895bcb4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections