General

  • Target

    191f8d050ef21ae44d05db3fd3aa6302_JaffaCakes118

  • Size

    700KB

  • MD5

    191f8d050ef21ae44d05db3fd3aa6302

  • SHA1

    c45b18f0c3d4d2e11a6542ee334f9f94fc8b53b1

  • SHA256

    2dc3a0e3ce0ab3d3936f9d2c28d8866eb1abf4c6443f9a97b77e3c49f6dab8d9

  • SHA512

    ae3528b8e1d79b88c8531a49192c93b038d276b97f41eda669973d80b6ca5b22f55347fafd9f9637eb2445f016b2409b66edb653f86435b7d79833d26faac31d

  • SSDEEP

    12288:Iy893nHzWHWk94fKgTte48C2gD4g4yBmdxsn6Q+wQqp/ypiw:S3Hzc94pTt172gD4sBmdxXcYiw

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 191f8d050ef21ae44d05db3fd3aa6302_JaffaCakes118
    .rar
  • Picker_Ver2.2_Final.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • Readme.txt
  • 新云软件.url
    .url