General
-
Target
ef11c83e07bf8750d17880fad9d97346_JaffaCakes118
-
Size
364KB
-
MD5
ef11c83e07bf8750d17880fad9d97346
-
SHA1
59e2b84c020caf50eea7ed9a370b34e548162983
-
SHA256
c5d01d968dd0fa2e43311b400265210402b3e5b97b45bedba8882ad45dc83a3c
-
SHA512
6a275b3907cf4ccb56b45974184da484688b69e419d0928701c251fb48f81e347c754e627273913c8886269a1fa54634f095f88e270a761d74a06b03e9ece5a6
-
SSDEEP
6144:+7ac7OLf8kJFigpdkhB0Mnuo3bouQAkKB0QfejrWh9BWSal83QlnbLyYP4+NtTXa:+7EdJFbnC+WTbobApmc9BWtlfl6mNtTK
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
ef11c83e07bf8750d17880fad9d97346_JaffaCakes118
-
gutou_email_build0411/gutou_email.exe
Headers
Sections
-
out.upx
Headers
Sections
-
gutou_email_build0411/新云软件.url