General

  • Target

    00e191f96e410e340d4e130c7adcc4c5_JaffaCakes118

  • Size

    473KB

  • MD5

    00e191f96e410e340d4e130c7adcc4c5

  • SHA1

    8e79d83ffae7777e38cec321a5f1c6f8e763b717

  • SHA256

    b9a7ab0375c3cfb447655219ba6057b44f0cc811879270ae174cfb141ab1ac57

  • SHA512

    f93ffaf5b3bc0f013f20205124227b4f5958dcd2aad1368c21dc18a966d199abc1c64974825e847805f0bb2fa2a0395dabebcdc402e5f05a9b6ae177ae66643b

  • SSDEEP

    6144:2RAgmiZ0BG3T8lpR7bM0HBKkZsnKrogOPxeX/ggkVid3c/AQbqfOb0v7ddrPl/:2Ggt068RPhxGnKro1xeeid3HGb0v77l/

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00e191f96e410e340d4e130c7adcc4c5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections