General
-
Target
1248b9e1681f93991ec35757338c597c_JaffaCakes118
-
Size
45KB
-
MD5
1248b9e1681f93991ec35757338c597c
-
SHA1
8e95003a5edc41af7b32348f6a350be07e3917f3
-
SHA256
22f36c1666087da1b88ac4e902a862a048bf08c6dd499831d396d49e852ee191
-
SHA512
641b990ed15d1cba85610fbeacf3c3e43bde2a9ee0a9c9b1b5d6c8ede148d949fde045c5661dc843b27092144fc3eb1f3acbdf3364f2250c90f4e7d177372c8e
-
SSDEEP
768:N3tZn6YPhixm0ikrCfrMDf3lWCUd+PqQJ/lfHcFIXIcrO0gO0LtAQ7ERl49WDky:ltAYPhEmvQQUfVWh+CIHvIcv0pAKERlL
Score
9/10
Malware Config
Signatures
-
Detected Nirsoft tools 1 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
1248b9e1681f93991ec35757338c597c_JaffaCakes118
Headers
Sections
-
out.upx
Headers
Sections