General

  • Target

    d548be88a497ba3479e5d009e5bb33e3_JaffaCakes118

  • Size

    1.0MB

  • MD5

    d548be88a497ba3479e5d009e5bb33e3

  • SHA1

    f05a54393175d97a18204e6eecba6a45deec7875

  • SHA256

    9012a47a33830ca75305a1648ff073143561cd7b102e93563a1eda196be3840d

  • SHA512

    47f914a34b3e9122b85efa7cc45c4a14d57aa89c08eac8c948a09f74ba90dfa371e18eda19bbb0b9b6404e1e57e51efc80fce603bdb0ffa23a3a3c0e8dbd44f7

  • SSDEEP

    24576:dXPcHdC+xs9FiVhjFgxDcEu6jfxiFjgXce9slW8kA1NKjAICuQr:dXPccvbiVhRmDcEgJcciyDzxf

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • d548be88a497ba3479e5d009e5bb33e3_JaffaCakes118
    .rar
  • Shut Down Expert/Help.chm
    .chm
  • Shut Down Expert/Language/Deutsch.lng
  • Shut Down Expert/Language/English.lng
  • Shut Down Expert/Language/Espa駉l.lng
  • Shut Down Expert/Language/Italian.lng
  • Shut Down Expert/Language/Korean.lng
  • Shut Down Expert/Language/Magyar.lng
  • Shut Down Expert/Language/Nederlands.lng
  • Shut Down Expert/Language/Polski.lng
  • Shut Down Expert/Language/Romana.lng
  • Shut Down Expert/Language/Simplified Chinese.lng
  • Shut Down Expert/Readme.txt
  • Shut Down Expert/SDECmd.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Shut Down Expert/SDEServ.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Shut Down Expert/ShutDown.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Shut Down Expert/下载说明.htm
    .html .js polyglot
  • Shut Down Expert/读我.txt