General

  • Target

    16650f7c409cc3b112aabdb89a2ea286_JaffaCakes118

  • Size

    50KB

  • MD5

    16650f7c409cc3b112aabdb89a2ea286

  • SHA1

    44920a5040226a7eae89afeb15dbc4c91882ceec

  • SHA256

    bd6946048bb358d453fabc57cd330cd80b0d933effa4d97d1bf852222f7f790e

  • SHA512

    55fff4a3495c6194f20e9e8e81251b2faecbdf5d22cd0847a7b3dc95f3e7b6c709fcec50d2f61d18cdd9da7c221466c9ff2bf5beea616b1fdb749747259308fb

  • SSDEEP

    768:pKk8ew2u5KUwODUgg43AFSqAb3g1ftr65EmLjd0EMlG0oT7:wfLxlwAUPMAFSqCQHsEmLjCG0oT7

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 16650f7c409cc3b112aabdb89a2ea286_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections