General

  • Target

    32d2f9dfb992325bed3f66767a9d9001_JaffaCakes118

  • Size

    1004KB

  • MD5

    32d2f9dfb992325bed3f66767a9d9001

  • SHA1

    4b6be5b716094b55dfcb69f24dd8b6c630829fa7

  • SHA256

    1d4d48ad46da1c6dc6cf42d6a2692449ff213c9f20b9229cfaea31aaa706cf85

  • SHA512

    5c8f328319e0d6667be6c181a255be2dd91f06d93a374c3ec2bac3366dc783bba7ddd874a8eb91fda457863d38b496ce952e6cd63d555111d391aaf71538f033

  • SSDEEP

    24576:B9O/0hz/aZ9HxpvtKrYzlmoH0k2wl2s/T1WrCEqqEP8bPHtLd8:B9S2arHxpVKMjVBvqFbPtK

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 32d2f9dfb992325bed3f66767a9d9001_JaffaCakes118
    .zip
  • goodtrans.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • goodtrans.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections