General

  • Target

    e0a051cdc65bd6a8df0d5f5a24357c9f_JaffaCakes118

  • Size

    25KB

  • MD5

    e0a051cdc65bd6a8df0d5f5a24357c9f

  • SHA1

    81ada81dd9582e3da06cdf0e6512152a3325714c

  • SHA256

    2dbec462a1587b1b69d93a5eb10ba9cf0801cd2ea2890cee1c72f1e5a09cde37

  • SHA512

    540b13e664a9733dee1ad10e7f5c97e7c7f8d8f993b6213364a5ea2f328311e996c3507c6b0787b4bec152b1e370653dd19d592d929f82787989171417398743

  • SSDEEP

    768:Q8SEN0cEw0Ub16ixXSNUHsEt8EUGdW3NVqc:RSEmcEwp15zHsEAU0Vqc

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e0a051cdc65bd6a8df0d5f5a24357c9f_JaffaCakes118
    .zip
  • astlog.chm
    .chm
  • astlog.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • readme.txt