General

  • Target

    1687c8e76c0ae79ac9ae642baa4488a8_JaffaCakes118

  • Size

    275KB

  • MD5

    1687c8e76c0ae79ac9ae642baa4488a8

  • SHA1

    79c50cd090a4c481e14d8bf471fe8b56c12f0619

  • SHA256

    ce006b51c3d0fbb802a8a9afcb48d83fb1c31a109bfafbbabb91a47babf30d47

  • SHA512

    211d585d26b03223f6cedeef210d2e40d70da7bbbc4e30e35206b958dc539642b97eeefd7b77e0968096b2a2f3fef19ba5e27c0e06e48393c8df6083afae3563

  • SSDEEP

    6144:/JmGfx27eLPfmvMd74rgO03KV9Qm688X+VdRZkojSU1Qy8/hK6vZ:/JmGJ27eP7+SKV9QXvuVP6D6X8ZKMZ

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1687c8e76c0ae79ac9ae642baa4488a8_JaffaCakes118
    .rar
  • gutou_sohu/gutou_sohu.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections