General

  • Target

    8b3837b448cf42f98b2300ae6d3b35c5_JaffaCakes118

  • Size

    1.3MB

  • MD5

    8b3837b448cf42f98b2300ae6d3b35c5

  • SHA1

    5e958ca5b01e71e93f0641b15d89527ac0fa1614

  • SHA256

    135ed62f47576c389d01603e3cae39c7f6bd889e32afe1b909a662ee4a04a1e4

  • SHA512

    0cb8b9b2f9491009967c29e6df1b9301b6b6d1b27f46f1570a471adaec6aaaf64d65296337eb380abc12746101591b50cb4dcae26daadd9547cdaa1dc90ffe92

  • SSDEEP

    24576:4mQE+5fga+VjUHbIRxpp5KfXLNoDaZBG4wAHfVwieh0YIFM5J3Ehti+2yZYl83QZ:4mQ/5n+2bIRnKfLyU04jHfVArr3F+FZs

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 8b3837b448cf42f98b2300ae6d3b35c5_JaffaCakes118
    .rar
  • 天涯易栈编程助手/UPDATE.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 天涯易栈编程助手/data/Config.ini
  • 天涯易栈编程助手/data/dat.lst
  • 天涯易栈编程助手/data/pslsg.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f2c3a8ffe62eddb65323621d30a75f77


    Headers

    Imports

    Exports

    Sections

  • 天涯易栈编程助手/天涯易栈编程助手.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections