General
-
Target
abc98db383514310f79558a50d810644_JaffaCakes118
-
Size
540KB
-
MD5
abc98db383514310f79558a50d810644
-
SHA1
de803ea1750d6d0701016a94da4192b83a83434a
-
SHA256
4e8eafb411b84b1b7b0ce44bf4934af11487ecb51a3f289ebd15a12f79270a9a
-
SHA512
4fa39bd865277e5294a5b3eaf0698d638a9c5d8a37e6252e41b7cb97f816587c5baf1732bfd0c8b1af57b0425d93c4fee90bb2776e10f326ca9149a93e425a5c
-
SSDEEP
12288:/5I6WysMYTFpoIlNUmD7dYCI6H9eg+1sfJJ9L0aypf8id6Sw1UVJ+vPE+I/C:RrEBm2R1HNegLDOPeidOksP5I/C
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
abc98db383514310f79558a50d810644_JaffaCakes118
-
qqplsxsm/使用说明.txt
-
qqplsxsm/易编社区—QQ批量扫信晒密工具V1.0.exe
Headers
Sections
-
out.upx
Headers
Sections
-
qqplsxsm/软件截图.jpg
-
qqplsxsm/郑重声明.txt