General

  • Target

    ef6927636094c71b9ba34bcb87bcd341_JaffaCakes118

  • Size

    333KB

  • MD5

    ef6927636094c71b9ba34bcb87bcd341

  • SHA1

    968557d3c77d3055bd0a8c57d9f1e95d1fa8dde1

  • SHA256

    4f85cb85736d674523c21c320110f022d8d7192ea2323427f6426090bbf2293c

  • SHA512

    0540e321d624f6c514d6e8f585041ee187913a9dee1ed837d5783d8224e51eae66c4e45320c30b56389e11675a58319d0f45fa13fca86ec8d76f8b7afc9b3f51

  • SSDEEP

    6144:a9W60PERXHTjh+UHkBZVqjsLzZoF537WemLLtMdWnpQZh9h4:J6xXh+UJczQVTgMd0QZh9u

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ef6927636094c71b9ba34bcb87bcd341_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections