Overview

overview

8

Static

static

7

e1b9860e05...18.exe

windows7-x64

8

e1b9860e05...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    e1b9860e05ea8a16bc61c1be475fda94_JaffaCakes118

  • Size

    50KB

  • MD5

    e1b9860e05ea8a16bc61c1be475fda94

  • SHA1

    6db3445d64c8045f4fb66a1c0ce8a82e30e8634a

  • SHA256

    6b6a6802713c55db062563c84dbb5b528e45ca82c9b208b1bf72921a4b161245

  • SHA512

    9adc1236313cb6d757c2f63be395b014f9e1b50b7c789e143e20c2d85306d51e94402bf569570d3dad9c43c7a886ccf3af7bce7c938d471d08ea8496928dae18

  • SSDEEP

    768:updaSB/Ng1J1g/d8DUHsYgch1+erD9DjqIEtaWgUooiNICFGg46b38Qax1kLBdr9:edrqDWt7rDdjByaFXt/3fc1k9d

Score
7/10
upxvmprotect

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e1b9860e05ea8a16bc61c1be475fda94_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections