General

  • Target

    cc0023bc9c21f5c8f216e97f94799dd5_JaffaCakes118

  • Size

    792KB

  • MD5

    cc0023bc9c21f5c8f216e97f94799dd5

  • SHA1

    46dcc6417185836f8714dffcf9b7fe17fcaeae2c

  • SHA256

    81dd5737af37c9a168c7be9c8550810d4a87ecf09e9e2ec78c0ef01a6dc6d255

  • SHA512

    a39cac53dce25c04bd6292d2be4137a01d90b8ea7086544e6823a4f0d9b8261188789b2e66a00959983e2f835b56f765080204a1a3cb867d624371dad36251e4

  • SSDEEP

    12288:ZSnhVICB6P1wR/5hwEKMiEPbn5u+M+VTpD1N8EQUS9iZO2Z3DQ7TE:ZotUwB3wqBluCTpgJUVtZ3DqE

Score
10/10

Malware Config

Signatures

  • Ardamax family
  • Ardamax main executable 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cc0023bc9c21f5c8f216e97f94799dd5_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections