General

  • Target

    b3f7a97eaa470ffd7d020f0b80da630e_JaffaCakes118

  • Size

    43KB

  • MD5

    b3f7a97eaa470ffd7d020f0b80da630e

  • SHA1

    f73bd45f0e55ad5c0aca386e8b59c297dbd196cd

  • SHA256

    86b97e7df133d9c1850d89df132291f4c1ba1ea1c1c6d2dfa8ac7ce705d4bdd0

  • SHA512

    02a0a5fdbdbfdd87fae02cf4fe80e6790046d2af8db9bc4e756d8b3827cfc7b359f2441c6284e21cbc9ac08806f46cd5e2965658af4f03dd0ec0b518f3134938

  • SSDEEP

    768:8/oF9qv5Vn2ZV1LHrrKBRetz4KLR/+4E2i3rVRkfe:8S9u5R2j1Dfmet0mi/qfe

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b3f7a97eaa470ffd7d020f0b80da630e_JaffaCakes118
    .rar
  • nk2view.chm
    .chm
  • nk2view.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • readme.txt
  • 新云软件.url
    .url