General

  • Target

    0cf79d1c7cd191a38b13127dc5548c44_JaffaCakes118

  • Size

    298KB

  • MD5

    0cf79d1c7cd191a38b13127dc5548c44

  • SHA1

    eab5c62f3760d216fd96bb82a07abf2db9c0b965

  • SHA256

    c87a5776c181d5706d6dbcb5153066b95ca374e557094c3d3fe271d2ecc77945

  • SHA512

    846880852342001b6e80cf96f3ade4a7b6d12b596616cefaf408a0673305850461bc09d2950c8ecb5768f1c7ec8773681395379a9a9dfac4dbcf1d888c0e4dbb

  • SSDEEP

    6144:EuIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLqIYi:v6Wq4aaE6KwyF5L0Y2D1PqLL

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0cf79d1c7cd191a38b13127dc5548c44_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections