General

  • Target

    6019eb10f39adc654e39a4207c41a1d7_JaffaCakes118

  • Size

    284KB

  • MD5

    6019eb10f39adc654e39a4207c41a1d7

  • SHA1

    bbe3c2736e1cd02af29a0f73c9c0cc7c897866f3

  • SHA256

    788f53561418fadd1e5a590a6b967e4f8a2c0dd5634bee9c4fb465a927709c0f

  • SHA512

    edaf96dfb9597bfcb6f8bfb70a373d8614527c45177ac8a7e041748bde238f1745e768d6454ccc7d2d6dba3dae17ef6328ac192c739ee122e65689c1d4da15ca

  • SSDEEP

    6144:Plb6SDOiIN4o2cOMayarS0IjX7n6wXmzbBFX+mNa:P0Siiu2cOMayaZerXXmhFXdN

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6019eb10f39adc654e39a4207c41a1d7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections