General

  • Target

    85bc877642631a2c09e898ef07f5b144_JaffaCakes118

  • Size

    1.4MB

  • MD5

    85bc877642631a2c09e898ef07f5b144

  • SHA1

    14737c8017fc6a2058d161b4165a164151330d23

  • SHA256

    e17dbf2c2a1de8c64b113fd804f8e208a87090b45b6a2c13073b49ce4fa69d8e

  • SHA512

    560951586d11154f2adf9a3d23af70659069251f1f439fa5c7b3ecafa154e347f7872812e06599c15a0f00c23932c4cb2edbd053bf47658f697767c269eec0b4

  • SSDEEP

    24576:g5njOcp+tPEDjf4VgOqdOolbICZknZcmF2K7s8p5Ra9M4uQ+yvWYJ6RaS30sp+ti:Knjjq6jsUdObNF2Tjadyt8wBsp+ti

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 2 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 85bc877642631a2c09e898ef07f5b144_JaffaCakes118
    .rar
  • 155绿色软件站.url
    .url
  • 使用说明.txt
  • 客户端.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • 服务端.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections