General

  • Target

    371af1fad6dbb555a5d83434e5b8c038_JaffaCakes118

  • Size

    75KB

  • MD5

    371af1fad6dbb555a5d83434e5b8c038

  • SHA1

    111bce74482d6b739b1d9add0858c5a1fd8f49bb

  • SHA256

    4c5f97f140d22654de7a229b9e2a3311c86a651cb42bf96c78d4efcaae409fde

  • SHA512

    0ca3def2207bd1b7fec7d19b86ce418db2adae98f24698f7329ba5a7e53e61d239e51e3398bb9541e01ba3e14eaf27d1d9f4609291cff046f6cb43c2925fc3ac

  • SSDEEP

    1536:ThiRxYn8Ie1bTsgYtXNNz8yz35vB0EcPtV5aRu0/6ruCw:ThiRxY61vsztXZz0bkb/6ruL

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 371af1fad6dbb555a5d83434e5b8c038_JaffaCakes118
    .eml
    • http://travel.km.ru

  • email-plain-1.txt
  • kernels32.txt
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections