General

  • Target

    12aa3815f5b82fca23bb2ca585aa89c8_JaffaCakes118

  • Size

    2.9MB

  • MD5

    12aa3815f5b82fca23bb2ca585aa89c8

  • SHA1

    196f0e970a1a4cd4928392c3d385e5bbe2209ff5

  • SHA256

    87c3eaa7ca4ec2024e65cda84b808375c1f4d98cbdb60509edb9113700444eca

  • SHA512

    8d383cfa7145f314971c4421d91e8b4933504ccfd27c4e9f3619628de37539339123a454ef8b29c6aa4ca8c62c5038176dbcdcbee0160ea0e852deadb95292e7

  • SSDEEP

    24576:ATU7AAmZZcVKfIxTiEVc847flVC6faaQDbGV6eH81k6IbGD2JTu0GoZQDbGV6eHu:ATU7AAmw4gxeOw46fUbNecCCFbNecv

Score
10/10

Malware Config

Signatures

  • Warzone RAT payload 1 IoCs
  • Warzonerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 12aa3815f5b82fca23bb2ca585aa89c8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections