General

  • Target

    2c62f4fea652fb2a7a2cb0c4eb111aaa_JaffaCakes118

  • Size

    14.4MB

  • MD5

    2c62f4fea652fb2a7a2cb0c4eb111aaa

  • SHA1

    602ffce642571b6d5e8266386f1fcee3891626ec

  • SHA256

    c3216ca3fc99b508a65f48c3c628e467973eef3fc427129d1bba7f1df97f9719

  • SHA512

    c972a073cf5000a61a899b73d346a2c29b3857130d7919cc5028494a0746d53985bdaa976f4a646b0cfbaa05cfa18b57f83bf5fe7ed884f5d0980e1f1b7f424c

  • SSDEEP

    393216:OQTC3hwQ97gmFT0zXgtDNF3CDySTYgeq040ECuUJ+:OQTC3hJ9E0UQF3UY5g

Score
10/10

Malware Config

Signatures

  • Privateloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2c62f4fea652fb2a7a2cb0c4eb111aaa_JaffaCakes118
    .zip
  • mpeg.exe
    .exe windows:4 windows x86 arch:x86

    8776c218139a6189cbda3d5f1f08cf93


    Headers

    Imports

    Sections

  • 万门课件不完美解析.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 东坡软件下载.url
  • 东坡软件下载说明.txt
  • 使用须知.txt