General

  • Target

    36db50e4ce59e886d5d900fd3bca41e5_JaffaCakes118

  • Size

    43KB

  • MD5

    36db50e4ce59e886d5d900fd3bca41e5

  • SHA1

    546c014fc6ae3e7c8558e39e3654c3250385e200

  • SHA256

    699975ff5d12533bd18dba012793f7bba064db2aa1499674df3ff15d49e4c7dd

  • SHA512

    724cb7eb9b77da6c3406fb703463214b9f832faac9c1ad486ab0f2eee351afb79a0388aef41cb16cffa3cd24531044163aae8baf86a2c8e58fd5e7152fca5347

  • SSDEEP

    768:Fxirloz8cxupjFxOXRSlSPeyFpZ91R7NcUuDjSf5Xq/XhujznD:FQr+TupTOXRheyFpZ91R2UTf5a/xu/nD

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 36db50e4ce59e886d5d900fd3bca41e5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections