General

  • Target

    e4c5cb5600f162c9c2b07dc567eeab9c_JaffaCakes118

  • Size

    1012KB

  • MD5

    e4c5cb5600f162c9c2b07dc567eeab9c

  • SHA1

    704d8eae46449d29aee7d7b56d12db9707b1bd8d

  • SHA256

    3302e919b5141e224999595eb83f1c125da15ee09143bd1c3b263fcbdaec0645

  • SHA512

    2b1ba83e28604d6b88bdcf3b057c9c066b4862516b0906123a5647887e878bb33b8383e0a2fdbfda492fa0d6b58e8815e1b1f1803622cf3b836dff9d487ba6dd

  • SSDEEP

    24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsx5:7J5gEKNikf3hBfUiWx5

Score
10/10

Malware Config

Signatures

  • AmmyyAdmin payload 1 IoCs
  • Ammyyadmin family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e4c5cb5600f162c9c2b07dc567eeab9c_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections