General

  • Target

    4d5519819581a266b5e4e07dda3a75aa_JaffaCakes118

  • Size

    4.9MB

  • MD5

    4d5519819581a266b5e4e07dda3a75aa

  • SHA1

    680e3a53a9cf302d7d1bbfea3fc6dea847e559e1

  • SHA256

    b8939e5c88e227b541e96bcbd97ad109a5787949cfe89966e4245c5abe3412e7

  • SHA512

    21a3cc640da285eaa17d99b57c3a4e13b60a9f36232f3755cb66eec79816da957ac3593fd2e2e0c77a92689ed6f8ab2afd233fd4e0da626aeb6b471fb1a4a5b4

  • SSDEEP

    98304:7FProRxBqn1qORH/x84V2eCyHZHQ6tRWZNrCdYlfoZQZBvhnmMnmcJU7zem/7Oq:d0kn1kQ2ny9QKRW/rC2lfoE5gWjJtm/5

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d5519819581a266b5e4e07dda3a75aa_JaffaCakes118
    .rar
  • WDOS.EXE
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url