General

  • Target

    77b1b04eb4ec148f1b3820f2cd16488f_JaffaCakes118

  • Size

    577KB

  • MD5

    77b1b04eb4ec148f1b3820f2cd16488f

  • SHA1

    21602ccc509d1d0853a3596b13918679f41c148e

  • SHA256

    af6c53142d07723b6607735a0cecd30f7b3774824be0e6f9635c3a6a828a2236

  • SHA512

    73a046b4e688b6e763dbb512cbd30faaf76121843fbac7ec559ac8a31297b96f634a05a9cb5d6f71ffe9f258ae8afbf274b408b05b7b62c4c6f04e25f3e695a2

  • SSDEEP

    12288:C++pX893nH3J6PaE4syqOxItXHoFXlM8jf/g0ykAERgZsgHhQLWb/oncLtiz:4u3H3wz4DqO2tmM8jfFyxXZtQA/oncUz

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 77b1b04eb4ec148f1b3820f2cd16488f_JaffaCakes118
    .rar
  • qqegao/maincfg.conf
  • qqegao/狐狸QQ恶搞对话框.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • qqegao/界面预览.jpg
    .jpg