General

  • Target

    319425a67d01e5b5c380b9a3a53104f4_JaffaCakes118

  • Size

    389KB

  • MD5

    319425a67d01e5b5c380b9a3a53104f4

  • SHA1

    ad5cf07ff1d35f7b0ca862c5f4801b60a1f04343

  • SHA256

    c239db6693b0033c2d7411505ce24b9a78902e30c127bb17d5dcafa57b11c820

  • SHA512

    1545eb9c16b384e1278e55bb02c8448a5489b99ff00e2d695aadb35cadb7473ecfa6bf34f3ec0f45cc59059b0a8f6077779ba209ae9b91fe395654bc2d15c0ba

  • SSDEEP

    6144:/EGKt0ebqdW8Qah6zt0op5KXQcjwxNFkP4KKlKy7Ht6ZeLRtlL6g7zQT:/DKtFbq/h6zJp5hc4N91jNOg7cT

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 319425a67d01e5b5c380b9a3a53104f4_JaffaCakes118
    .rar
  • xwylcskb/小玩意列车时刻表.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections