General

  • Target

    e09eef4414c0e517ebff964c9fc608d1_JaffaCakes118

  • Size

    200KB

  • MD5

    e09eef4414c0e517ebff964c9fc608d1

  • SHA1

    e0281c723c10791e913c35a79ab189d721661f1a

  • SHA256

    09df49ebfe1969f668055e7b1b0af338d56c01c65f34a78301c9ae0143079a5f

  • SHA512

    06416582caf956f6cf2eb8977e4f780f8a893bebbd07f40907b9839c5e629e9b9f7378ef4f6f9c74ea22be30d7b65140f9de72fa90fa20d04220f0cb3f73d94e

  • SSDEEP

    3072:dHYootXWczoDAlEi8mhNitg4gBabvBPwIkAJP1:d4ootXCAlAJP

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e09eef4414c0e517ebff964c9fc608d1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections