General

  • Target

    3931ba96316ed9a3d86dee20a62613a1_JaffaCakes118

  • Size

    15KB

  • MD5

    3931ba96316ed9a3d86dee20a62613a1

  • SHA1

    cc3d5172b18c6033c495212adbcc205c5abb8c5d

  • SHA256

    5bea6c6d18e49b9dde2da94c12f94853ac36b4a6bf38c933ddb5b3e570906058

  • SHA512

    b2a1043d36c1fdf12f70d8bc481d34eab1f8628b87b5c3ba52a6eee85a21241ecd44d08c9770609266e19ce99d9dcf99b6beec5dc9b4d8503130d93ab90785e3

  • SSDEEP

    384:bt2gIQn4Av5iRNRgUeAKu0yQyORF/eZnOmPsUSYG:xtjn6RNRgqKu0NUnOmPsU/G

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3931ba96316ed9a3d86dee20a62613a1_JaffaCakes118
    .zip
  • file_id.diz
  • tsrh-earth32sts_10.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • tsrh.nfo