General
-
Target
debc5321063e5bd5305845a7750cda05_JaffaCakes118
-
Size
40KB
-
MD5
debc5321063e5bd5305845a7750cda05
-
SHA1
4c830a633ffc755679f8f049ea9b319c76185bdd
-
SHA256
d3e163328e736f52cd3bd339048f875e252f097af4913fe97960e4b7bdf1c2c4
-
SHA512
8bfd38e0a536be7808694430236de43218197f3d575df1163e97c2d332ac24a3a77dd07f9b895c470c84a910fc3b4c4630a9980ecbf97508679e485ef2436c5d
-
SSDEEP
768:NT/iYOB5yeNg2dV5BfEp+0BETKwYRhvB9src5cGkH:NTKYEgW5BfI2TrI5B9srrtH
Score
9/10
Malware Config
Signatures
-
Detected Nirsoft tools 1 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
debc5321063e5bd5305845a7750cda05_JaffaCakes118
Headers
Sections
-
out.upx
Headers
Sections