General

  • Target

    7912f8edf2de5b53b3061e7b905fb0d3_JaffaCakes118

  • Size

    2.4MB

  • MD5

    7912f8edf2de5b53b3061e7b905fb0d3

  • SHA1

    9358c2450a6baced0b69dbee2d82894b35683425

  • SHA256

    3af07c2174b959d5a05df91947d2a69b6d7201e7e134783ebb490b121ed0f2b6

  • SHA512

    2e1fbf45d536ee62962240b0efda5cec746b79160b2b2c325ddc5aea47908d304dc4dbe523671c6f5d9b768aa2a1a22eef38e585caf1906b171a62a50a938018

  • SSDEEP

    49152:MTKglOkWZnmUMES/rgophwujMV55MlusWWoKHl/Y265yYrUrXl1qcXKeIM+:qKglJWUU9SkophwuQVcProKHlg2659rZ

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 7912f8edf2de5b53b3061e7b905fb0d3_JaffaCakes118
    .rar
  • hanzify.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • keygen.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 下载说明.htm
    .html .js polyglot
  • 汉化新世纪.txt
  • 汉化说明.txt