General

  • Target

    2d1ba2ce02bcefef9068054ec427d042_JaffaCakes118

  • Size

    97KB

  • MD5

    2d1ba2ce02bcefef9068054ec427d042

  • SHA1

    ad6c45c791cdfc8d5b61ba3964061d988426998c

  • SHA256

    a75399eba0a8550518a3c7def50d40d7e3d3605b5fdce0ea98bbb5b31e902a49

  • SHA512

    173b3cb44c648616fad3799e1766923cd8bd428fc11aefa58e7adcee60cee0a7eeb05893de307e5a8a7e66f658a030d3918a869b3fb316c833ba8c599ff71da9

  • SSDEEP

    1536:1ZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAEMqqU+2bbbAV2/S2LNmHkD:JBounVyFHFMqqDL2/LgHkc2

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d1ba2ce02bcefef9068054ec427d042_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections