General

  • Target

    d2f0d82fd9b80cfa1826416f3d4f45a7_JaffaCakes118

  • Size

    48KB

  • MD5

    d2f0d82fd9b80cfa1826416f3d4f45a7

  • SHA1

    c66d1db9699fbd216bbf976fa7ec4b42046652ae

  • SHA256

    0544d5549b005a5554a8f87f3dc8fa2d89471361256cf6854d08020dd8014965

  • SHA512

    3079f8fcbcfe3294f24832c90b7c1eeb1ce2b1a4df72d28ec0beba4a1c2a5837e64d1d6d6e29d6c2671e400d2a046b29229b0b196aa09a78762257f43d772a59

  • SSDEEP

    1536:isklc0cQD/NyHruK+ljyOBDavMNeeMoF1Pq/tB8HKpW:8lfxcHaGLMNlR1Pq/tB8x

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d2f0d82fd9b80cfa1826416f3d4f45a7_JaffaCakes118
    .rar
  • ipnetinfo.chm
    .chm
  • ipnetinfo.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • readme.txt
  • 新云软件.url
    .url