General

  • Target

    db8891ddaa80bc4079c43712ae0309a2_JaffaCakes118

  • Size

    850KB

  • MD5

    db8891ddaa80bc4079c43712ae0309a2

  • SHA1

    f764ffa6f0cd7180e5df418c579b64991199732b

  • SHA256

    5621018c4d97b6916b6559e3565d6c5f9097c20e57c2662f417b68bf31251b71

  • SHA512

    684f195da26083ff4e31d20cbc8d5005715ef675c3deb8826f9e59402b39fa311f951a99f6724e91a92f7125f38d2952e4499748bbd0cd79fbbfe9c07993144e

  • SSDEEP

    24576:pLsPKqWCxY5pX6OqEM3dD1T1bJ43qj/pIwevYJpwsb:pnqRG66CjT2q6Tv+pwsb

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • db8891ddaa80bc4079c43712ae0309a2_JaffaCakes118
    .rar
  • UPX Shell/Language/简体中文.lng
  • UPX Shell/UPXShell.chm
    .chm
  • UPX Shell/UPXShell.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • UPX Shell/uninst.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • UPX Shell/汉化说明.txt