General

  • Target

    ddbabf081ce0a7a8ac32f120408f5c74_JaffaCakes118

  • Size

    11.9MB

  • MD5

    ddbabf081ce0a7a8ac32f120408f5c74

  • SHA1

    4a2e372c1575e6eabc3a7be9bcc1bcd4c5483bb5

  • SHA256

    a9aeac4a1f8066a869ad585c888c584a4520b6dee830371387b39a487748aa20

  • SHA512

    22c26eaa73ed6f036cea60ca1302d027588881a8f7eee1eb5ac14c68938cd27c3c129cdc28a7330ad80bb841635ba9911dfa633880969dbf02eac79838bebc2b

  • SSDEEP

    196608:9uR+kCcz2TF0PkumK/xn1RUE42jdTcLgFU5bw29uDt0zQhjJ04EdQeNopCGd3dGy:M3X2gmK/xnngeg0q5s2YDt0zAd04EeMa

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • ddbabf081ce0a7a8ac32f120408f5c74_JaffaCakes118
    .rar
  • wd-keyg.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • wdisplay32.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • 下载说明.htm
    .html .js polyglot
  • 安装说明.txt
  • 非常世纪资源网.url
    .url