General

  • Target

    43ec24ea09dc7c3fdce20f601d5007d1_JaffaCakes118

  • Size

    279KB

  • MD5

    43ec24ea09dc7c3fdce20f601d5007d1

  • SHA1

    3496ed729682376d18a478222be1d350a0572101

  • SHA256

    cf6505aa1c7f78f0e27dce846b9e5aec54edd948887af2a626df31ec2f158cd5

  • SHA512

    db6e6140ded572113ce765f5036d5ff011c5e7f707f401207f60c04002053a1e73422f14bc9c3d3343f86a3db45a567e16630f6024fb3dcc0d7b06c6dd7f616e

  • SSDEEP

    6144:iMggLtESuJX3gdQNldDERAynCvbuK4oOAh2kPk5xIZIWEB54Nup9:iMjLtExVeQNlpKAgqOe2kWNLf9

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 43ec24ea09dc7c3fdce20f601d5007d1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections