urelas | 1c8a08689c16a7cab2a8c7c03a66befa_JaffaCakes118

General

Target
1c8a08689c16a7cab2a8c7c03a66befa_JaffaCakes118
Size 581KB
Sample241007-kpv6eazgnd
SHA256 d127adc44b4e55a787816e3a42712b4b90043397c1d363b8a42c64e744dfd3b3
MD5 1c8a08689c16a7cab2a8c7c03a66befa
SHA1 ee5dcbb869ef80dcbd27a5a9dbbafcf1cddcc9c2
SHA512 ebcd63e5d33595d583c0bebf3a356f67385bf021da592780600f340668960691d7649a171d88954a1365bbf12327b4f3406e5b7e4acefbe8c5af04175af08883
SSDEEP 6144:MajY1oC+/U8Vjlx4kk9HKda4L383j8hpdoSQbQFsrF1W/h84IrV7mMpH8zQW4jQu:cOlx4kk9HKda4Y38oSiQi4kVdcQzjD
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

upx urelas

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c8a08689c16a7cab2a8c7c03a66befa_JaffaCakes118

SHA256 d127adc44b4e55a787816e3a42712b4b90043397c1d363b8a42c64e744dfd3b3
MD5 1c8a08689c16a7cab2a8c7c03a66befa
SHA1 ee5dcbb869ef80dcbd27a5a9dbbafcf1cddcc9c2
SHA512 ebcd63e5d33595d583c0bebf3a356f67385bf021da592780600f340668960691d7649a171d88954a1365bbf12327b4f3406e5b7e4acefbe8c5af04175af08883
SSDEEP 6144:MajY1oC+/U8Vjlx4kk9HKda4L383j8hpdoSQbQFsrF1W/h84IrV7mMpH8zQW4jQu:cOlx4kk9HKda4Y38oSiQi4kVdcQzjD
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

115456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths