General

  • Target

    0a4e2f1f55fbe4544d342870d97e8a0d_JaffaCakes118

  • Size

    977KB

  • MD5

    0a4e2f1f55fbe4544d342870d97e8a0d

  • SHA1

    9476a9ecf64827fb91c14a816ccb76a3edd73f0a

  • SHA256

    3bf0fadde2ebaf3830bb62dd95434adb1550813b81360a42145e95520e6fafdd

  • SHA512

    03a9072bf786367e0fc3edf86bbeba38333f1c3e5be4db9943e438972aa0f271189fbbd71bb4016c3d6fd400ffd72ff26636ac77c6e5be00418c64a2894aa770

  • SSDEEP

    24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxt:7J5gEKNikf3hBfUiWxt

Score
10/10

Malware Config

Signatures

  • AmmyyAdmin payload 1 IoCs
  • Ammyyadmin family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a4e2f1f55fbe4544d342870d97e8a0d_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections