General

  • Target

    2c06c1f80b9c60a6dc265e3d5029c152_JaffaCakes118

  • Size

    186KB

  • MD5

    2c06c1f80b9c60a6dc265e3d5029c152

  • SHA1

    f04ba241be7651116d2c86807c5de14590a1f897

  • SHA256

    a0d0c9fb6aea5fbc75ba15c8c21ae56c95e78e729a9afcabc0922d807cabd712

  • SHA512

    3d5407253e31dbe827e28ff2543507154b57dacfd1e09673e541f86c54ca4a368658c5fdf22fdf363f7cb124d221f97872d03d169adcebfe6da93f491a031510

  • SSDEEP

    3072:md3mEohxL6GVXQiQwRf6w/sUNH08JAvL9vfOKKMMazPUNNW8kNNy0HARMi:mdmEohx+Gw86w3u8JAv1VKsPUXYNxHAN

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2c06c1f80b9c60a6dc265e3d5029c152_JaffaCakes118
    .7z
  • Регистрационный номер идентификатор пользователя.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Сообщение об операции (для получателя - физического лица.doc
    .doc windows office2003