General

  • Target

    0076cb2256880d34b6427279dde76871_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0076cb2256880d34b6427279dde76871

  • SHA1

    4ea3663d8d810daf041d375a9433140960b57b9c

  • SHA256

    cacc4c298035df29f55abfa84a823e2b0fee1481c77d6e529f9ba41967416fb5

  • SHA512

    3cd2c127375ca7243153a6531cb0734be32dba4d2ed8b4bde988576f29886a646cc9f6979d0e3dcbaf21902e97d61d1903e482aeff221c187ec7dd5b16a5ef47

  • SSDEEP

    49152:Aj0Uh92qGgxMul+L/KxyCs71Ja27KbzJYLje6TNkhJ2y:AwUJpMuKi2Latb9YL5Nmky

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0076cb2256880d34b6427279dde76871_JaffaCakes118
    .rar
  • HB_PStart205_ljh.EXE
    .exe windows:4 windows x86 arch:x86

    e41c25ab7824b3df73334188c40518ae


    Headers

    Imports

    Exports

    Sections

  • PStart205.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • 下载说明.htm
    .html .js polyglot
  • 汉化新世纪.txt
  • 汉化说明.txt