General

  • Target

    dca9c747204b25190776ef0756893533_JaffaCakes118

  • Size

    33KB

  • MD5

    dca9c747204b25190776ef0756893533

  • SHA1

    ca489b1800f223a5150e9f2c71f7df0427f9d66f

  • SHA256

    32c7c0779df786a2bdd199c9258e6f0c403d7de6509028dccea22f6992d4fa86

  • SHA512

    d7cde9ca4580d28fe9ea1b17d1ec895b93d1be36c548a0de9d3379938f5ade90f3e53daf2175fb1b3eec6c52a129bf75480d59616d972fe1920f3fd1cbf8983c

  • SSDEEP

    768:hEXapzXJNqd/lyLJnzmMG1aBhdkCpgPaovmfmctw3jWEUnxkMOPcl/QdXssB1VkL:h1DLzdzm/1sdkCQaoOfFtw3jbUnxkxkZ

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dca9c747204b25190776ef0756893533_JaffaCakes118
    .zip
  • Mass-email.Express.v1.6.6.3.Incl.Keygen-ORiON/o-mem663.zip
    .zip
  • File_id.diz
  • Keymaker-mass.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • TOP.nfo
  • bar.nfo
  • orion.nfo
  • Mass-email.Express.v1.6.6.3.Incl.Keygen-ORiON/orion.nfo
  • keygen.nfo