f63772b65ee7f255b8e9386e2a980ca9_JaffaCakes118

General

Target

f63772b65ee7f255b8e9386e2a980ca9_JaffaCakes118
Size

249KB
MD5

f63772b65ee7f255b8e9386e2a980ca9
SHA1

0de6801c4079f8b280c025c902312170335049df
SHA256

b6cc5f6ecedd49e02c43f1b7d26ed52439c0356d68c3e8849065dd811fe07cf0
SHA512

8099e5a5054ff26ecb23c19d7b3131a7b74614780158b9b71c2f8e41a20d9e214b9b77bf2352403032e14d0f39e26078be9b4e6e31711f80063037ba3e887058
SSDEEP

3072:wQIdI0X17PqsCK8rx6qSqc1pJDfbQnJIoutEyjCGYfV5V:wxy4hPqMhf1pJDfby+oSLOnVD

Score

8^/10

upx

Patched UPX-packed file 1 IoCs

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

resource	yara_rule
sample	patched_upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f63772b65ee7f255b8e9386e2a980ca9_JaffaCakes118