Resubmissions

20/06/2024, 14:38

240620-rzttnaseqb 10

General

  • Target

    06e600b729ab01c8e38a1f46ab85a749_JaffaCakes118

  • Size

    275KB

  • MD5

    06e600b729ab01c8e38a1f46ab85a749

  • SHA1

    0a67b60b36a4f950fcee873c58289efc412b3e75

  • SHA256

    312f6d178f512184f38b9cf023c7f38520da92ad22f9a0ee06878d0581d0f1b9

  • SHA512

    c7748b94201790b3b966b5a1cb6e68f4a8e1110fa1048a1cafbd9185884f51df6fdf2ea5449e3194d2e2d1dd1c82ffc0ae083b51e3e388200abd844ad8d9558a

  • SSDEEP

    6144:VFLFE+xd3Fyprbf6ZJr8DPBUDthcOWpa0pBRi08Y4sv:VPd1kcF8NUDjcOWpaabisb

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 06e600b729ab01c8e38a1f46ab85a749_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections