General

  • Target

    0b28f0246ae8185a0b7dfd1aa4c9bb03_JaffaCakes118

  • Size

    373KB

  • MD5

    0b28f0246ae8185a0b7dfd1aa4c9bb03

  • SHA1

    385eb75eb88e6ad9a650bb4e7606ae1f6c62abe3

  • SHA256

    4eac30425922a6df487e6928fcc7a05617da642f5da09748ec95004d0a2d88f9

  • SHA512

    06491904a845ef9d21e2a5d56ea20300171d615c2204ad6b50c15d2aaa86be6afd4bcdf7e17ec5f255f816085d498c1063f729b59cf4272a66ae79fcec2f46ca

  • SSDEEP

    6144:GnEzh9at2f1JqTqt64HtbyiRIggzMmHnjzu0Bes5knJTPjMYZjLcIqutrV/FpouT:mIC5c6KteiR+zMae0knNPj75LcwtrV/r

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b28f0246ae8185a0b7dfd1aa4c9bb03_JaffaCakes118
    .zip
  • ytqdwsq/??????.txt
  • ytqdwsq/???????Ver1.0.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ytqdwsq/??QQ????.url