e1e13d845c5217d7b12a6b9f2ca98b38_JaffaCakes118

General

Target
e1e13d845c5217d7b12a6b9f2ca98b38_JaffaCakes118
Size 3.7MB
Sample241211-rtb2na1kbm
SHA256 36ed996c533bc6164cb32bad503da618680ace425be13315686c97d804d0cc7c
MD5 e1e13d845c5217d7b12a6b9f2ca98b38
SHA1 157848d4498c2a6bc73e663ff57522b470d06cc7
SHA512 b9ce301a7da4925c6a325c10c86841a1cd55c2675979a3cd486157d5fda107a7bf9260cfec1985c71af2d0af6aa5518a4b91ff9de9cd7e3254d9c84713254d69
SSDEEP 98304:fAYRWJ3guzrI7fiL9tgZZEkpDwyPVg1b3QOQYRitH0RSXJgGCnUMW8BMHDWXR:fPWLr3gzNPPVg1brJRitJ5gHD7mK
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1e13d845c5217d7b12a6b9f2ca98b38_JaffaCakes118

SHA256 36ed996c533bc6164cb32bad503da618680ace425be13315686c97d804d0cc7c
MD5 e1e13d845c5217d7b12a6b9f2ca98b38
SHA1 157848d4498c2a6bc73e663ff57522b470d06cc7
SHA512 b9ce301a7da4925c6a325c10c86841a1cd55c2675979a3cd486157d5fda107a7bf9260cfec1985c71af2d0af6aa5518a4b91ff9de9cd7e3254d9c84713254d69
SSDEEP 98304:fAYRWJ3guzrI7fiL9tgZZEkpDwyPVg1b3QOQYRitH0RSXJgGCnUMW8BMHDWXR:fPWLr3gzNPPVg1brJRitJ5gHD7mK
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7157616

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths