General
-
Target
b78f9442e009704532733347049b4b5f_JaffaCakes118
-
Size
47KB
-
MD5
b78f9442e009704532733347049b4b5f
-
SHA1
78cfd5f9dd9e4295941030f5b4f6e504ce146a7b
-
SHA256
dffa0edf9b575bf65ef330e61da52814317a57548578de76c5849f7e36f34f94
-
SHA512
08281c42d12d2ae1f2c64f822c6065714d7db53898f62f78cf38fca7bc3dcacda717615b464f632fd83856136d62d24feff3f3306cc34b27e45848252a7520d9
-
SSDEEP
768:/6pOPHPSqxQSRTTgQc6shdnxLsHnCsy7bUctxGAsg+nMBpgDA0QnNP8UBO:/6zoHgLhdnxY8t8G9BGDA04k/
Score
9/10
Malware Config
Signatures
-
Detected Nirsoft tools 1 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
b78f9442e009704532733347049b4b5f_JaffaCakes118
-
HA_CurrPorts 1.87/cports.exe
Headers
Sections
-
out.upx
Headers
Sections
-
HA_CurrPorts 1.87/汉化说明.txt