General

  • Target

    f14da2e1b964cc550c4859877a9be0bb_JaffaCakes118

  • Size

    17.7MB

  • MD5

    f14da2e1b964cc550c4859877a9be0bb

  • SHA1

    472271f33bf9c2041330d199a0c7495857bd5121

  • SHA256

    5eeb65b02dd9acd7b3909162eee7c785feac72445d66bce1a5042ba23d9da0bc

  • SHA512

    d08c226a239db82dea268fd3c580012c975ed24bd7b2bebb6c11752e66684a6f1aec7d2417c2c259b3a5b10f7242681986be50d4b5d67544ff7978718bd4f6fb

  • SSDEEP

    393216:JmNN3AHXHv1qUjBgUlPO8Ol3sXG91WM5TV1SVPmjP8UXjc:IXQHtNjXXkd/15R1SV60Sjc

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • f14da2e1b964cc550c4859877a9be0bb_JaffaCakes118
    .zip
  • 155ɫվ.url
    .url
  • PhotoZoomPro4/Order.txt
  • PhotoZoomPro4/PhotoZoom Pro 4 Setup.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • PhotoZoomPro4/Read me.txt
  • PhotoZoomPro4/What's new.txt
  • keygen.exe
    .exe windows:4 windows x86 arch:x86

    29db3ad3a02b4808b1332e0e02883a01


    Headers

    Imports

    Sections

  • unblacklist.reg