General

  • Target

    618b07d7370dff16f5fe6ffae0709639_JaffaCakes118

  • Size

    1.6MB

  • MD5

    618b07d7370dff16f5fe6ffae0709639

  • SHA1

    e2b4481c8355b0ae32909c0855266f07e7887999

  • SHA256

    fcee75a97c45504cea750471ba5157520aa19baebe71f8ffa07dff0e94bbe0e6

  • SHA512

    e0196ede101192343b0903a080a86b0d39b7738a08ac7c82a48e0062c0e360e23b9d604e41e226979f135681ac62317552e5b1a23a4ea77db677743878639a12

  • SSDEEP

    49152:rDxtMUQum8TKGec/tOceVJRalGh291NRSlD:Do8/t/tOhRbh2LKlD

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 618b07d7370dff16f5fe6ffae0709639_JaffaCakes118
    .zip
  • 155ɫվ.url
    .url
  • alpha.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • ANSI.kbd
  • AT386.kbd
  • Alpha.exe
    .exe windows:4 windows x86 arch:x86

    b2ba386672a44d54cbb56b5bcb251d8c


    Headers

    Imports

    Exports

    Sections

  • Alphapc.fon
  • IBM3151.kbd
  • Linux.kbd
  • Microsoft.VC80.CRT.manifest
  • Microsoft.VC80.MFC.manifest
  • SCO Console.kbd
  • VT100.kbd
  • VT102.kbd
  • VT220.kbd
  • VT52.kbd
  • Wyse 50.kbd
  • Wyse 60 ASCII.kbd
  • Wyse 60.kbd
  • alpha.chm
    .chm
  • background.bmp
  • license.txt
  • lpd.exe
    .exe windows:4 windows x86 arch:x86

    f66e37046d62bb2c15b960187717d14b


    Headers

    Imports

    Exports

    Sections

  • mfc80.dll
    .dll windows:4 windows x86 arch:x86

    171634aabc6eff9406d434016ff974c3


    Headers

    Imports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • ocEventLog.dll
    .dll windows:4 windows x86 arch:x86

    38df976f699fb1d5abfe868465aace7d


    Headers

    Imports

    Exports

    Sections

  • res409.dll
    .dll windows:4 windows x86 arch:x86

    d811d71710ad58776155b7a8da1fa9db


    Headers

    Imports

    Sections

  • res804.dll
    .dll windows:4 windows x86 arch:x86

    d811d71710ad58776155b7a8da1fa9db


    Headers

    Imports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • keygen.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections