General

  • Target

    d742eb9679994e7a5c46de901e919879_JaffaCakes118

  • Size

    660KB

  • MD5

    d742eb9679994e7a5c46de901e919879

  • SHA1

    c9246b496a962301034c7148618d8e7710a33ff6

  • SHA256

    d44eacdd8e1bac09ca484ec1e9e63735b81a61f173cab3672593d8c0734794e7

  • SHA512

    b7beb4d84e210d46475fdf7a9c654d950b2b8890fdbed456a508dbdf8b5da871c7c7707c3bdbbd4fc5e36cbe19adf55733da7dbe02f18a10ed78bd49e25dcd4b

  • SSDEEP

    6144:O1xBWeMRygxDLbHxlSBxzJn1REBB6q1gBFJV6AvRqsf6YU+FM+3Yn/fCXjQGDqLb:Ol3MQIDKJzTq+Xxvo0U+d3s/fCX0t

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

218.54.30.235

Signatures

  • Urelas family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d742eb9679994e7a5c46de901e919879_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections