1173f3f4ac013c5df66e81f021ae88f0_JaffaCakes118

General

Target
1173f3f4ac013c5df66e81f021ae88f0_JaffaCakes118
Size 248KB
Sample241004-cw2b1azbmp
SHA256 311c9bde638057fc78ec710f52d5ad0fa36d171942e68bcbcb68457640c6caae
MD5 1173f3f4ac013c5df66e81f021ae88f0
SHA1 33b1e9bb4f513ad40bb7da661aea0e3fbafacf45
SHA512 481bc9041ad3c655cacad7146853960e1b9ee0cac12dd6f579101339ad65e9a5ef1b147cc95ffffc2bfcd24d6cdfb33e30b0dc657342d2b61406adc4aa9fc9d2
SSDEEP 6144:z8vLbNYSKXgyooSy8ATt5dUsZrZXG0GP+Rg1f6oeAVONjaTLsthm:I+SKXgHoSot0wdXG7+RgniNdrm
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1173f3f4ac013c5df66e81f021ae88f0_JaffaCakes118

SHA256 311c9bde638057fc78ec710f52d5ad0fa36d171942e68bcbcb68457640c6caae
MD5 1173f3f4ac013c5df66e81f021ae88f0
SHA1 33b1e9bb4f513ad40bb7da661aea0e3fbafacf45
SHA512 481bc9041ad3c655cacad7146853960e1b9ee0cac12dd6f579101339ad65e9a5ef1b147cc95ffffc2bfcd24d6cdfb33e30b0dc657342d2b61406adc4aa9fc9d2
SSDEEP 6144:z8vLbNYSKXgyooSy8ATt5dUsZrZXG0GP+Rg1f6oeAVONjaTLsthm:I+SKXgHoSot0wdXG7+RgniNdrm
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

241664

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths