General

  • Target

    27cb9cedabd62d3095893b8d9876c565_JaffaCakes118

  • Size

    249KB

  • MD5

    27cb9cedabd62d3095893b8d9876c565

  • SHA1

    76bbd3a630c752dd29a34141286ddb80ca142050

  • SHA256

    f78ae2b3a31b57a6e44a5c4faa905416d1e5b3eb4014f05daf0bbcc930d2fe72

  • SHA512

    a6bc0504e25398429bcfd0fdcca3ee495c9af5445cbe759d9b4056e62e5e0ef56d9eab3111b38b8b08a72b9e8a515ed8f8da0a80030bfaf6e5390ce60252fb82

  • SSDEEP

    6144:EFRaI2EqBP/WsZL1PgLl4w0AidVym0EnarUBYVs0W:ER72EqluswR45JTnaEY20

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 27cb9cedabd62d3095893b8d9876c565_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections