General

  • Target

    3ed88c7928445db33133bb4a4fdbc5a4_JaffaCakes118

  • Size

    155KB

  • MD5

    3ed88c7928445db33133bb4a4fdbc5a4

  • SHA1

    d13625e82a29ae64f8abac1cbc6d718c3c3d51ee

  • SHA256

    5444455b300f300e01cf7ed173f1ff631dff332ba07ab38a6954ca486958e4dc

  • SHA512

    b7b6c1fcf805d2b6be1e56e29b10585794558d30a957e5698c83ba0030f526c18aa7eba4a453a7e59912699764385a07d24160c733c9dfc9a3912281d737643f

  • SSDEEP

    3072:oMY1UE4J0bWChyeVSRKfx2937TphnkOqMJNKmKEfqyxjE4:CcRC0eVHeHFqM2mKEBV

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ed88c7928445db33133bb4a4fdbc5a4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections