General

  • Target

    d3ae7c29f40d9ebb290e6ab3d1302b1b_JaffaCakes118

  • Size

    1.1MB

  • MD5

    d3ae7c29f40d9ebb290e6ab3d1302b1b

  • SHA1

    acd388dc66db12046fa765d3110ca48110666688

  • SHA256

    c8340554ffdee6ebcb54928148648691258ba0dfd24730cf82ed0e40431ae704

  • SHA512

    78d66584910d321ea3696bf3f423a9e7f9576cf2b04128f3f48e2e8717c91a750c7f9a20a75a5c8ae429bb0720c00f07bf090eeadb0ec44e6ee21abdc7cada2d

  • SSDEEP

    24576:Cai7XDeJGsy5Z0LYC3y6TrYPzdvEh0cOLVuqTeyCLn:Cai7XDeJ/y5ZEYsyIYP58h0cO3CVn

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • d3ae7c29f40d9ebb290e6ab3d1302b1b_JaffaCakes118
    .rar
  • FSsys958/FSsys.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • FSsys958/config.ini
  • FSsys958/readme.txt
  • FSsys958/update.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • FSsys958/xufy.dll