General

  • Target

    a34661ab9976a94e5cb43c161e6ba472_JaffaCakes118

  • Size

    43KB

  • MD5

    a34661ab9976a94e5cb43c161e6ba472

  • SHA1

    b65bce3eb7b652cdd42b69e794a637982695803d

  • SHA256

    6eebb60c8312305f64daa6c7e86ed9d0753e7cc78bad046e982a4b6f41030955

  • SHA512

    423144d768c8e3283dea91022f5919dcfb5050c70f8d6562a4f3f377660f7f5493f3e2b70fbe1a165833a719f294f586683a6bda2311faaa95eb2f8d62fcb768

  • SSDEEP

    768:5nZ47P9Gms1Fb4tdS4q3Hn4C6xaKu6cX1lYYKFNauAZJPr+Gr:5sP9CZ4cIC6xQX1C7FNaVr3r

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a34661ab9976a94e5cb43c161e6ba472_JaffaCakes118
    .rar
  • iecacheview-v1.28/IECacheView.chm
    .chm
  • iecacheview-v1.28/IECacheView.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • iecacheview-v1.28/readme.txt
  • iecacheview-v1.28/新云软件.url
    .url