General

  • Target

    394f44025fdb967374a8916e55a5424d_JaffaCakes118

  • Size

    1012KB

  • MD5

    394f44025fdb967374a8916e55a5424d

  • SHA1

    9ce22cd08c7b59deba27b5d1836d11b94e1a86a2

  • SHA256

    c2b874d62cd354112fd30e87faa83d52c6d3d1581b685b1533764a20460ee963

  • SHA512

    dcb95d181866a3be68ea31a765cc527c871e7c05a6fcdc4ac9bf6d3c4169c43b3095a0cebbf1f8de3e66a2d24c6ba315f6a87ef355060fc378bb4ae553a626b1

  • SSDEEP

    24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxA:7J5gEKNikf3hBfUiWxA

Score
10/10

Malware Config

Signatures

  • AmmyyAdmin payload 1 IoCs
  • Ammyyadmin family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 394f44025fdb967374a8916e55a5424d_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections