868156de2b648050528e7f5a5170e1fb_JaffaCakes118

General

Target
868156de2b648050528e7f5a5170e1fb_JaffaCakes118
Size 684KB
Sample241102-vcpszaspel
SHA256 a32a1af3f9dfa285a67f1fa097ea3bb91d14d980e0283a87834fa3b67f38ed1b
MD5 868156de2b648050528e7f5a5170e1fb
SHA1 b91551c7766396d36df87a035c488ec835c0236d
SHA512 d28ef94325b2d66fa3d65f94c3e4d27fb6408e0a830863319fdae4e5b4b1acbc60bd15078b9cbdd83647a0446db6c8c442d654069e251ae9f0e8ec0463a400f5
SSDEEP 1536:Iy6XuxjNmK9JdqZESaGxPiQYTtjuzZ2bH1cwLCMj1Kpnouy8:Z6ebd0ESaU6XT8zZStCL5out
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
868156de2b648050528e7f5a5170e1fb_JaffaCakes118

SHA256 a32a1af3f9dfa285a67f1fa097ea3bb91d14d980e0283a87834fa3b67f38ed1b
MD5 868156de2b648050528e7f5a5170e1fb
SHA1 b91551c7766396d36df87a035c488ec835c0236d
SHA512 d28ef94325b2d66fa3d65f94c3e4d27fb6408e0a830863319fdae4e5b4b1acbc60bd15078b9cbdd83647a0446db6c8c442d654069e251ae9f0e8ec0463a400f5
SSDEEP 1536:Iy6XuxjNmK9JdqZESaGxPiQYTtjuzZ2bH1cwLCMj1Kpnouy8:Z6ebd0ESaU6XT8zZStCL5out
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

276272

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths