General

  • Target

    31d5bc3c75d1573d9606a69160c1c8dc_JaffaCakes118

  • Size

    364KB

  • MD5

    31d5bc3c75d1573d9606a69160c1c8dc

  • SHA1

    967063b01f4703aad3ef5c1eacce2c529cd1899c

  • SHA256

    ab4c08ea8f44544dc9724bb196677561746643eba735a31d2284040077e79080

  • SHA512

    c266e7ddb921c626e561390a76c6a7efa3e9015118f5424fe745e7b154eac83a5c780d2c88f39901dda6cfc16d3559fe0bf33ce43d213eb5b24dbeb98c50a0f2

  • SSDEEP

    3072:QemGVt8GTylTmxGQHp6IRgBWnzr7HD37nnrrLnvKx/B44/Fo9uV:juEylTm/Hpnz/HXnr/vYi4/Fo

Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 31d5bc3c75d1573d9606a69160c1c8dc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    c94ede301410740e3977f98a1c33292f


    Headers

    Imports

    Sections