General

  • Target

    3326509f15ea5143d91269d70fd57934_JaffaCakes118

  • Size

    941KB

  • MD5

    3326509f15ea5143d91269d70fd57934

  • SHA1

    03ac82b81c4e2ff7122de51728a890a48c06d374

  • SHA256

    a2fc59938625502d5970d27ac48b2b27b68950864cf2814bb360a38118bbbafd

  • SHA512

    b87dddc0762add3d40bff7acc0256920c2f5c1a8f5fcb8c1e2d6ed7048d507231cba41343cf8ad69da399343857131ebf20ce1e026dd102789a49d4908c5ddc3

  • SSDEEP

    24576:hK08XMguoe8UE3eJZQBJfDcGw90Mj5ovtL4y:hn8PeN4MmDcGw90MjmVLv

Score
7/10

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 3326509f15ea5143d91269d70fd57934_JaffaCakes118
    .rar
  • BSDOS.EXE
  • BSDOS.HLP
  • BSWIN.HLP
  • BSWin.cnt
  • BSWin.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • FreeDOS.bin
    .zip
  • Manual.pdf
    .pdf
  • Order.txt
  • PAD_File.xml
    .xml
  • ReadMe.txt
  • Setup.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • Setup.inf
  • 下载说明.htm
    .html .js polyglot