General

  • Target

    3fec1f39986ff9eac6120f0ea41da25a_JaffaCakes118

  • Size

    969KB

  • MD5

    3fec1f39986ff9eac6120f0ea41da25a

  • SHA1

    3b33034f306dc292a24a0b22a40e240fc4555fbf

  • SHA256

    3b4b5a7d74b994173b3bb76a08f76edf0d42c22cbb72eed812c257ea92453815

  • SHA512

    45d16809cc795dc210b2a6e9ef29664817839cc6c2733cd887c5184ba40134f32f2782ae0c2a11088dc0f4d47cc9acc6117bc4f04fdfd79c012bc5f1af6756d9

  • SSDEEP

    24576:bGJWhPe6Yr5BCa7cmWndpABzBOOdlyxK0taj/hzNJPEatQ:2WhPLYr5BEmWAdrl+K0aNPPE/

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3fec1f39986ff9eac6120f0ea41da25a_JaffaCakes118
    .rar
  • hychm/hychm.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • hychm/说明_Readme.html
    .html
  • 安装说明.url
    .url