General

  • Target

    28a2f6214894e9b5a163357fd59a4b4a_JaffaCakes118

  • Size

    95KB

  • MD5

    28a2f6214894e9b5a163357fd59a4b4a

  • SHA1

    d94081df7b20ee33fd7e5ec11b5777ad3ed15393

  • SHA256

    bbe7449053cc8de08a9e4ef2d3f37aa2c17fc1140176faca891347ad6eda0a56

  • SHA512

    3f9237daeb34c37094d38e2c3d40925da4d792e8ecff5edb7e8a09268a42f49db955f8b08429884335cdf7a5c94c2b9df44377ec80fd517585685c4bb714efbc

  • SSDEEP

    1536:eofvYMXMQUI3V7omGrFhH1DcF+xCzyjzfRYKruVTbe+uiDa4D5Y06JtKlXpomfNC:eofvYsUI3lozrf8M3p/QTbe4D5XKgxps

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 28a2f6214894e9b5a163357fd59a4b4a_JaffaCakes118
    .rar
  • FILE_ID.diz
  • StartupMonitor.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • StartupMonitor.msi
    .msi
  • 下载说明.htm
    .html .js polyglot
  • 汉化说明.txt