General

  • Target

    42b1eb4a3740e60cb30eb88d2a582062_JaffaCakes118

  • Size

    161KB

  • MD5

    42b1eb4a3740e60cb30eb88d2a582062

  • SHA1

    96798d804aba8e61cf4d207f16e9ee02786c2ee9

  • SHA256

    9ae8a917a002d56369a8991fa9e023e52fab65bca5b9d3caca0b33266965e98c

  • SHA512

    21934125567212307131ba771b9e2ea9e4bd15e0a3f33f425e577745320658cf013b53364d2e593bbaaac3a6e8071ec4bb3d35376af509c9b86958b846857d17

  • SSDEEP

    3072:RlFy8KUuT6Y7bImjgQ/+6BhG97ahKfuAfWBjdE55ngr+5TfinMP6su:fnuOs/1m6B2ahKfuAcj0grufa

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 42b1eb4a3740e60cb30eb88d2a582062_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections