General

  • Target

    08f325d598313ea2e680c00e70f2339f_JaffaCakes118

  • Size

    531KB

  • MD5

    08f325d598313ea2e680c00e70f2339f

  • SHA1

    b6fc41d920f82081f2a4a2608eae292e7b10bcc3

  • SHA256

    c9e85201d73b0a41b8738e1f79bbcc40e94a38a101b529a897f0a7d1b79749ad

  • SHA512

    4d0aeeb7cc4bfb9378811d4f5a8b4a0f21f01fa40fb11ab4cb229632bc8405241cad077fd9b7949c2ed78810bb50b28892bf52f2b889535140602f3f95d5f53e

  • SSDEEP

    12288:IJmXTOIFQvNu9MLP0mwBk9i+7yYCJCrqkVb13J/jPJCq/qt:SaTOIFQvNaMLP0mnP7a76FJ/NA

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 08f325d598313ea2e680c00e70f2339f_JaffaCakes118
    .rar
  • Garena 2.4.exe
    .exe windows:4 windows x86 arch:x86

    973c360562dcfd29bc2bff01dfaf0a17


    Headers

    Imports

    Sections

  • Garena/0.bmp
  • Garena/skin.dat
  • check.ini
  • garena.ini
  • update.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • war3-2401.exe
    .exe windows:4 windows x86 arch:x86

    01617d329b6552765264fd0f2a7a35ff


    Headers

    Imports

    Exports

    Sections