General

  • Target

    074d42a61862ac43ae5e69a27e0c14d1_JaffaCakes118

  • Size

    43KB

  • MD5

    074d42a61862ac43ae5e69a27e0c14d1

  • SHA1

    1e84f9e87f4bd0aede2a7182a5770286cc3eaca2

  • SHA256

    f6cbbd95a4bdd0f1c693e20e19591662cbcd2caf4a9b49078beef11eeea0af4d

  • SHA512

    479a172ea0c78aab2de9d06f1986c9875911c4c629717e94c6db688e90d0a003270b4e4be5180ee5bcf82dcdfe56c2bcb50c34838c3f8c635f151b533a75e976

  • SSDEEP

    768:/q3IMolspLtoXXkyQt5n3okZCKPJoqcBdbw/VrSBnY8b/vJpqInEj0HSNld3zfGk:/q3ylspZoXRKPl+hQr6bXJ4Iwd3Aw8k

Score
10/10
upx

Malware Config

Signatures

  • Nirsoft 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 074d42a61862ac43ae5e69a27e0c14d1_JaffaCakes118
    .rar
  • operapassview/OperaPassView.chm
    .chm
  • operapassview/OperaPassView.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • operapassview/readme.txt