General

  • Target

    4f733b590b4e54bd613086d12899f61d_JaffaCakes118

  • Size

    1.6MB

  • MD5

    4f733b590b4e54bd613086d12899f61d

  • SHA1

    2ad0cca558f5e4025714c2f056cb20aa2c2db3f9

  • SHA256

    855e7cc396459e3d7f479f7ebf164b1b20c3288fe7968af60949035b6902fc86

  • SHA512

    8422d043bd2cccbfe043b2fcb01ede949d12f012ecbfc39cb898d7805a198d8c272193d4ec8b51a8c6de0611dd74a72cface1b3a7d4bf5f8ba0f1e6bfca3cb8a

  • SSDEEP

    24576:L7w9cRiKyd/QlaJi6+zGIgIm4mqoZ0t9tcsgwrN+WRgDxZxndvkI2yr51:+cR60Ei6eOq5j0wJhRetn5kIj1

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f733b590b4e54bd613086d12899f61d_JaffaCakes118
    .rar
  • qqproxy/QQProxy.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • qqproxy/QQWry.DAT
  • qqproxy/QQ居·QQJu.com.url
    .url
  • qqproxy/说明.txt