General

  • Target

    63f68f4dde8c1ae2fee642997e437f8d_JaffaCakes118

  • Size

    3.8MB

  • MD5

    63f68f4dde8c1ae2fee642997e437f8d

  • SHA1

    bf97f70b5094bcc7b3ea61e4480dfa624244c7d6

  • SHA256

    dcf363b56ff5a80c278f4bf5739d911cf401a91f0f1ce013ce29d4f60df630e2

  • SHA512

    7fd49e707be0580732f34479019efc88c0a0ee48804a7592d0692b6a55cef9b9665c30c2d12dd95ee5cc936a58e86629f4d982443e1994d06591d3f23624d405

  • SSDEEP

    98304:e+KmjsgWH+tjbFxSmsytI1dbiOptUZDzOwArCNaOI+sX1j7Z:BoetjZj521F/ptiXsCrI9Z

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 63f68f4dde8c1ae2fee642997e437f8d_JaffaCakes118
    .rar
  • QQWry.Dat
  • ShowIP.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ip.cgi
    .sh .ps1 linux polyglot
  • leechadda.txt
  • license.txt
  • proxyadd.adtg
  • proxyadd3.adtg
  • proxyaddu.adtg
  • proxyexcept.txt
  • proxyinfo.dat
  • proxylist.txt
  • proxysite.txt
  • proxysitesocks.txt
  • proxysm.exe
    .exe windows:4 windows x86 arch:x86

    5a498eee87e4d89512a84502f500181f


    Headers

    Imports

    Sections

  • readme.txt
  • setup.ini
  • 下载说明.htm
    .html .js polyglot
  • 安装说明.txt
  • 帮助文档.CHM
    .chm
  • 非常世纪资源网.url
    .url