General

  • Target

    fe9519d271fe522e08d088a98a50ebb3_JaffaCakes118

  • Size

    235KB

  • MD5

    fe9519d271fe522e08d088a98a50ebb3

  • SHA1

    4fc1d9471c35346791f1c7dd079961c979ff41f6

  • SHA256

    6a84fe3e7eca6838dea1491c61bcf281f921ac7c924e3bef6f93a0f4ee77af48

  • SHA512

    61ec0b5b53e67b4ab42cee8b1f0b277f651f81df3c5a76db9dfd94fab3e5957e217ccb58ae217e3271defef14ac8674c7bbb58f463e0375162a5fb580cd54a57

  • SSDEEP

    6144:b4CFfifD2gVKVTQQ249HZ52KTh9XKOCgLJacj5/AZtRs5q:bXgr8VMQDT52WXKq9fj5/AZj4q

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fe9519d271fe522e08d088a98a50ebb3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections