General

  • Target

    65571d4a8c352cf5482d8e29c56db678_JaffaCakes118

  • Size

    276KB

  • MD5

    65571d4a8c352cf5482d8e29c56db678

  • SHA1

    f55c0643067fc668f1135b1c29bfbd88f8fdb956

  • SHA256

    fe6ee31915830476a333b38174cc6709019bcafa5140363a1bf44756b5a3e337

  • SHA512

    c6e05be21896c73285a7971b0acfbbd5073c42e2806095a2944ce5b738ac393d9ddb8e6a4c6acb732fc2344c58c33afb33f9626a7d8d2160cf7083e39268325a

  • SSDEEP

    6144:Qz+ZIja7JiVzDfdUITRilQ37imhVltGNPl4/fRq4vTBxvVjk5CKOil1:Qz+4KMVzDfrTRYQ3+WltCiHE4vTB3cwU

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 65571d4a8c352cf5482d8e29c56db678_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections