General

  • Target

    a4bbbebd9bb26f02a0a7bb7092ac3d06_JaffaCakes118

  • Size

    389KB

  • MD5

    a4bbbebd9bb26f02a0a7bb7092ac3d06

  • SHA1

    687d705f948a9b7b430a4249eda0544d4b1de676

  • SHA256

    e04e6b24ecce5a89b75aad9da48f41f816754c732a2a0e76b9e90a45ea65f650

  • SHA512

    677dbf0de3d161a97a338989db1403972e0d2e796f8390bfb49969c6ae078230bb83fa9da2b6fd9257aca83ca7d84b2bcda8ab3897e388e661c2baaf2e06bfd1

  • SSDEEP

    6144:BFRaI2EqBP/WsZL1PgLl4w0AidVym0EnarUBYVsceh0EUwUDLDv:TR72EqluswR45JTnaEY2Punwyvv

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a4bbbebd9bb26f02a0a7bb7092ac3d06_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections