General

  • Target

    2e16cb80551ebde4271e538ebf034abf_JaffaCakes118

  • Size

    2.2MB

  • MD5

    2e16cb80551ebde4271e538ebf034abf

  • SHA1

    3dce07b0763ee627f4dd7f334ddb65e40f78a29a

  • SHA256

    3d41a3c3b21bb60677c1f49fb6e74852215d4fbc286dc3f1d6e39445e9d4d5bb

  • SHA512

    959e513223e87bdf13c4fb9af49a7202b093fbbef1a8548e1df50229e7ec6b383160691c4c846a4df2c81d26f473b23a4f632fa6348874e8e73ba0185b0c48fd

  • SSDEEP

    49152:nDt46lLzFpjwmEnjkRf2q28e/9nJK9GRkcpSF1Ngz1qOoKVbB:np9wLk0qPWncGeGE1axD5B

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e16cb80551ebde4271e538ebf034abf_JaffaCakes118
    .rar
  • boer-v8.1/Boer81.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • boer-v8.1/ico/ico1.ico
  • boer-v8.1/ico/ico2.ico
  • boer-v8.1/ico/ico3.ico
  • boer-v8.1/ico/ico4.ico
  • boer-v8.1/ico/ico5.ico
  • boer-v8.1/snd/001.wav
  • boer-v8.1/snd/002.wav
  • boer-v8.1/新云软件.url
    .url