General
-
Target
3259f8d522a57d8fc8a268c22fd67730_JaffaCakes118
-
Size
3.6MB
-
MD5
3259f8d522a57d8fc8a268c22fd67730
-
SHA1
b04c38191f95be48197ba76b44840da0ded5ba3d
-
SHA256
d79a7cd282901fdf33af3f5cc2abb8e60a49df6c8d7c20670020ff60fc4366c5
-
SHA512
85dc4f5b5fa0e7094a0007609dfb8b66ba911de2d0dd9c687e152b35ec20be893985aaef3cd837a6cbb6d7511967b6a53cebb43c711e83eb864ed2884a4afacf
-
SSDEEP
98304:cgsQP7Dx4lcNItBB91pzW7jFnKT//bICrLn:tHP79GtZ1tMjFKLD
Score
10/10
Malware Config
Signatures
-
Nirsoft 2 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
Files
-
3259f8d522a57d8fc8a268c22fd67730_JaffaCakes118
-
looklookis/NirCmd/NirCmd.chm
-
looklookis/NirCmd/Read me.txt
-
looklookis/NirCmd/nircmd.exe
Headers
Sections
-
out.upx
Headers
Sections
-
looklookis/NirCmd/nircmdc.exe
Headers
Sections
-
out.upx
Headers
Sections
-
looklookis/bauhausl.TTF
-
looklookis/dfttww5.TTC
-
looklookis/looklookis/Cpu/Cpu.ini
-
looklookis/looklookis/Cpu1/Cpu1.ini
-
looklookis/looklookis/Cpu2/Cpu2.ini
-
looklookis/looklookis/Cpu3/Cpu3.ini
-
looklookis/looklookis/Cpu4/Cpu4.ini
-
looklookis/looklookis/Hdd1/Hdd1.ini
-
looklookis/looklookis/Hdd2/Hdd2.ini
-
looklookis/looklookis/Network/Net.ini
-
looklookis/looklookis/Ram/Ram.ini
-
looklookis/looklookis/time/time.ini
-
looklookis/looklookis/winamp player/winamp player.ini