Overview

overview

7

Static

static

7

WinPcap_2_3.exe

windows7-x64

7

WinPcap_2_3.exe

windows10-2004-x64

7

arpspoof.exe

windows7-x64

1

arpspoof.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    72f1b4eb62b9f80429a6d69ac1e9cc84_JaffaCakes118

  • Size

    332KB

  • MD5

    72f1b4eb62b9f80429a6d69ac1e9cc84

  • SHA1

    2314ffce9f44f1f23e112a7a883ec4974acea56b

  • SHA256

    a2c84b91cdbbe168bb5aaa26234896a8337801eca4dfe46c3caf33e237a6e90e

  • SHA512

    96b9559a8be74d3a3bf57a30821fb0ea7d61a47c72f5a2d0405afb4ed0019c4b285d905b5c6111b5ec00bc90fa2476691e10f6297dcd21e03a53f56a3431579c

  • SSDEEP

    6144:q3tt+17vLJ3JvwlbuEX1X5GeLIKDCuzgieJZV5F5bMPw+3+zvamEQpdaSv6g/C:C+17TJ5vwlXXFGSFeJ3vNM13+bZEQpMB

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 72f1b4eb62b9f80429a6d69ac1e9cc84_JaffaCakes118
    .rar
  • WinPcap_2_3.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • arpspoof.exe
    .exe windows:4 windows x86 arch:x86

    9aed57a1e25e3c7205fea8602f57b814


    Headers

    Imports

    Sections