General

  • Target

    df66f970149e0ec9fa948586d38f6ec5_JaffaCakes118

  • Size

    175KB

  • MD5

    df66f970149e0ec9fa948586d38f6ec5

  • SHA1

    f02a5a36091e13b11c20a885259abd52b788af4b

  • SHA256

    900933197d3892d724340c222934b71d853fe23af537073a30d8e4ab15daa92b

  • SHA512

    4b20d68e9f6eae6da576c99d9f7b27209f80339faca37f6b1653f035d71f0274dfeba281ac617a443868e9c054f3df9cb59aae0e2a4b7eb4614950d698089229

  • SSDEEP

    3072:qE0QdmQgsHk9WBV+bXw71lYTgHWd7vgghvvHwKsIpLu0AQ483BYGN/g1kkHRkt:qE0QpgsHZsA76sG3vX+K+u/g1kU6

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • df66f970149e0ec9fa948586d38f6ec5_JaffaCakes118
    .rar
  • 10064312749/Demo1/Delphi_Unit/AwardBiosPas.hpp
  • 10064312749/Demo1/Delphi_Unit/AwardBiosPas.pas
  • 10064312749/Demo1/Demo1.bpr
    .xml
  • 10064312749/Demo1/Demo1.cpp
    .js
  • 10064312749/Demo1/Demo1.res
  • 10064312749/Demo1/Unit_FrmMain.cpp
  • 10064312749/Demo1/Unit_FrmMain.dfm
  • 10064312749/Demo1/Unit_FrmMain.h
  • 10064312749/Demo2/C_Unit/DatFormat.c
  • 10064312749/Demo2/C_Unit/DatFormat.h
  • 10064312749/Demo2/C_Unit/DatFormat.obj
  • 10064312749/Demo2/Demo2.cfg
  • 10064312749/Demo2/Demo2.dof
  • 10064312749/Demo2/Demo2.dpr
  • 10064312749/Demo2/Demo2.res
  • 10064312749/Demo2/Unit_FrmMain.dfm
  • 10064312749/Demo2/Unit_FrmMain.pas
  • 10064312749/exe/Demo1.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 10064312749/exe/Demo2.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 10064312749/下载说明.htm
    .html .js polyglot