General

  • Target

    329a8e81322b5ce7afe5ec1f9a7710b1_JaffaCakes118

  • Size

    1.7MB

  • MD5

    329a8e81322b5ce7afe5ec1f9a7710b1

  • SHA1

    48fce3021f29b932dee4a25c76110aaac78645d8

  • SHA256

    25b48c2f91a8ad55b946a746fd5d99d231fc684e25674908bfd7d11cd77d00d7

  • SHA512

    4080bd164bb89db92cc054f6fd219a211545ea53d9fdae3f875210e462388833ba3dff2cd80543d21c8faa2118bdebbd57d07cfc23d3c73a883cf1fe4633d959

  • SSDEEP

    49152:FpohfGCCx0gFeeukq09w7EaC/VhRJaDwnKeT1QW:Fpegvhw76LeEn351

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 329a8e81322b5ce7afe5ec1f9a7710b1_JaffaCakes118
    .rar
  • SniffX/MSVCR71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • SniffX/NPPTools.dll
    .dll windows:5 windows x86 arch:x86

    8a413931cc2969954673fc05bd8fd353


    Headers

    Imports

    Exports

    Sections

  • SniffX/npf.sys
    .sys windows:5 windows x86 arch:x86

    5f44e5f16872677e1b2cd5c5f110202a


    Headers

    Imports

    Sections

  • SniffX/packet.dll
    .dll windows:4 windows x86 arch:x86

    825a71ca83b262daba919fe2e201dfae


    Headers

    Imports

    Exports

    Sections

  • SniffX/sc.exe
    .exe windows:5 windows x86 arch:x86

    b903afc175a10c95d49fcb5d67709c4a


    Headers

    Imports

    Sections

  • SniffX/sniffx.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • SniffX/soft.pt42.cn.url
  • SniffX/wanpacket.dll
    .dll windows:4 windows x86 arch:x86

    1f4cdd338b6403e79e13b51acec1dadc


    Headers

    Imports

    Exports

    Sections

  • SniffX/wpcap.dll
    .dll windows:4 windows x86 arch:x86

    06f3d2c48036103c8a5f5cfdcf3daca1


    Headers

    Imports

    Exports

    Sections

  • SniffX/卸载npf驱动.bat
  • SniffX/手动安装npf驱动.bat
  • SniffX/新云软件.url
    .url