Overview

overview

7

Static

static

7

2/~wtmp001.exe

windows7-x64

7

2/~wtmp001.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6a12fb520dc15b6cadbedcff5c7f4992_JaffaCakes118

  • Size

    224KB

  • MD5

    6a12fb520dc15b6cadbedcff5c7f4992

  • SHA1

    199883e5096a4f6f17c327ed80b6ffd7953a77a0

  • SHA256

    d4cc7ee3a3df7c0f3de5ceaca9cf288475dce77563982869a40989b6e04bd532

  • SHA512

    3574ab0175755d24d96af064f9b20dc2fe7b3f238f150a0014b60eac5905795876625e03bf660e4fd01ed1948567633ce3d8ed326e150ecdf7e25e96977fdc9b

  • SSDEEP

    6144:WEweH8U5wUBTML4mlZljYLm3mXiv+ky8b0hX:WEwLkw0lmNjYL6RvXy8whX

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6a12fb520dc15b6cadbedcff5c7f4992_JaffaCakes118
    .zip

    Password: infected

  • 2.zip
    .zip
  • 2/7992_3765/crl-set
  • 2/7992_3765/manifest.fingerprint
  • 2/7992_3765/manifest.json
  • 2/AdobeARM.log
  • 2/AdobeARM_NotLocked.log
  • 2/ArmUI.ini
  • 2/MSI2fb21.LOG
  • 2/MSI597ea.LOG
  • 2/~wtmp001.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections