General

  • Target

    1b1ad53c16c19859a9784e7ce8c87e60_JaffaCakes118

  • Size

    1.4MB

  • MD5

    1b1ad53c16c19859a9784e7ce8c87e60

  • SHA1

    32243679ef46d95d87b63b399147dc7c70d2d7c9

  • SHA256

    8d3f4494a3c15423bdef2a15eb65d945e29f31afd1a643a8b6780de18c552ec7

  • SHA512

    fef89a3b08c322edaf38df6d820ccd792e6e0416df5b61bbc5ae28b2438f162976fbab004c8ce310987906cbd2c7fcf6b8655ad82abd788255c950c255fc0b78

  • SSDEEP

    24576:WFC7PC4AuNF2HDsnCyp7400UiCfSrDqvpZC9aJz4w24Yq8O+0Am6SoiwLwOsR7x:KGNF2HAn7u0TiUYDqhZIaN72btd3iwLC

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 1b1ad53c16c19859a9784e7ce8c87e60_JaffaCakes118
    .rar
  • Power Notes/Lang/ChineseSmpl.txt
  • Power Notes/Lang/English.txt
  • Power Notes/Notes.CHS
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Power Notes/Notes.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Power Notes/Sound/Later.wav
  • Power Notes/Sound/VIP.wav
  • Power Notes/Sound/late.wav
  • Power Notes/Sound/user.wav
  • Power Notes/disclink.dat
  • Power Notes/file_id.diz
  • Power Notes/help.chm
    .chm
  • Power Notes/license.txt
  • Power Notes/readme.txt
  • Power Notes/syslink.dat
  • Power Notes/新云软件.url
    .url
  • Power Notes/汉化说明.txt