General

  • Target

    641acb9138132460ddc10e2ece99c461_JaffaCakes118

  • Size

    1.8MB

  • MD5

    641acb9138132460ddc10e2ece99c461

  • SHA1

    9c30535ca753f6e6d4fa8dc2e77a4d263d4b8ad4

  • SHA256

    9ed770bf305af43c6ac1c184dda742425a947c2e6162e9649973ae7ca9e4af19

  • SHA512

    c76aa0ab5de1099fca20ec17abc39068c5c15b70f78e2227e876943d78cd8c40ec23f0061a8fe7bf29ccdab48e464504927167ef3627bf40953e22464a5dab95

  • SSDEEP

    49152:0l2tnprWQuT0pUT2nlnnFrZAcU+r41K0vo+dPUp3UIA869oYq:SMprWQuT05ln3AcUZdcpERoYq

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 641acb9138132460ddc10e2ece99c461_JaffaCakes118
    .rar
  • UPX脱壳终结者2.0.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url