General

  • Target

    a01d3f1801149a3f507cf1b3914b76d1_JaffaCakes118

  • Size

    383KB

  • MD5

    a01d3f1801149a3f507cf1b3914b76d1

  • SHA1

    d76404f892794f6a6c610cde0ef9b6a4394fdf67

  • SHA256

    4cb768f2c1f8203b917e899093cf4cba4a4e184bd4208bde92e84959e0016d54

  • SHA512

    7ac95fefd8782bb77d40dda891f5e0544a250982f93c40b2894bd066698ceece509b5af89bee65ecadd3dc0225f9ec7a01f7ff36248e022a67f204c7b994629d

  • SSDEEP

    6144:Hlb6SDOiIN4o2cOMayarS0IjX7n6wXmzbBFX/DDWo8DLDv:H0Siiu2cOMayaZerXXmhFXLDravv

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a01d3f1801149a3f507cf1b3914b76d1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections