General

  • Target

    61a3429990a1450b8a07e3b8e72ff3fe_JaffaCakes118

  • Size

    1.2MB

  • MD5

    61a3429990a1450b8a07e3b8e72ff3fe

  • SHA1

    5d46413880022c8b49e2a8828f1021bd48ff0c3a

  • SHA256

    1ec61f540c823860cd46abba92ce2c85eee600a85167220f07db4dfd1b319b22

  • SHA512

    2dd7f0ce604b0b85f57075cd3c024c708ce87238fa262f2091910d174aace29c73764e61525d21e588f718131bee3997090065233271a233f9a1aff6505019af

  • SSDEEP

    24576:twwcen6zTgdGUsiynQXoSQxB2S29iAvIOmv4SAdMwJf+YKzYolMMlEngUl:r9ncTgdGUsis6oSeISm/AOmOdJ2HVBlI

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 61a3429990a1450b8a07e3b8e72ff3fe_JaffaCakes118
    .rar
  • ESET_NOD32_升级账号获取器_V5.0.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe .vbs windows:4 windows x86 arch:x86 polyglot


    Headers

    Sections

  • 新云软件.url
    .url