General

  • Target

    ec8c6883d7342245073f843633ea47cd_JaffaCakes118

  • Size

    13.0MB

  • MD5

    ec8c6883d7342245073f843633ea47cd

  • SHA1

    a011bab9f0049c058f612b35e3ef9ca7a452c85c

  • SHA256

    1bb48341cfe46aaf9d69619b0d0615b1c61018d8746c38a0a6ec65112fd18199

  • SHA512

    6944ddbbf649f6daf2fa595ab6c3a98c9c553aa0e4ce8327b41a812924ede1d3088e5a13ad7e3eb946a469cfa2738e4ded4f6fdd8e585877f27b38d5a124376d

  • SSDEEP

    196608:yU7d9xZSt4U7d9xZStSU7d9xZSt4U7d9xZStO:D7d9xZo7d9xZS7d9xZo7d9xZF

Score
10/10

Malware Config

Signatures

  • Warzone RAT payload 1 IoCs
  • Warzonerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ec8c6883d7342245073f843633ea47cd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections