General

  • Target

    9c08c271bd49beb431ff553f102094be_JaffaCakes118

  • Size

    3.0MB

  • MD5

    9c08c271bd49beb431ff553f102094be

  • SHA1

    adc478d3b014bd8363d500437f4f7a7fd6768c18

  • SHA256

    e9802addc97cffd252fed2a763915a197375a7ad53192cf7e1a82041cdff11a4

  • SHA512

    8ce7cba640c4741ea9e400c5c4be5c86915e3e3bb75aa3874f135301967fc6b1ff0d2c310775e93a9bc6bb218e4674b6319ed7c63629402d6cd75e954c147507

  • SSDEEP

    49152:O1sZeatokSFZEphguJ/F2xcPMbaNvquSrwZcopbK41lwFamv1/5QCJrMyEHH9ulL:OWrtTOqphJ/fNyuNIOwtpJrMyEdU

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9c08c271bd49beb431ff553f102094be_JaffaCakes118
    .rar
  • ztfsc/★记注傲看软件下载站★.reg
  • ztfsc/中天文件恢复反删除工具包/OKHAN说明文件.txt
  • ztfsc/中天文件恢复反删除工具包/中天文件恢复反删除工具包.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ztfsc/中天文件恢复反删除工具包/帮助.url
  • ztfsc/说明文件1.url
  • ztfsc/说明文件2.url