General

  • Target

    f9d9606cb11d5332000e082c5a2fea6c_JaffaCakes118

  • Size

    778KB

  • MD5

    f9d9606cb11d5332000e082c5a2fea6c

  • SHA1

    e1c6597c2d91d1053e8e57593c5e5869b3ec158c

  • SHA256

    aa956b696c3a60e74c4a2c8556952820461c2664c419d1561764d4333ca37f20

  • SHA512

    a3e0032f91fe6366d689f8a5e7cd902139435038450d2d324c0d4ae92308ed1bce25d0289d8768bb5ce3dabfbce2a7e0ada34423bf4518ea1422fa22c6d6ab3d

  • SSDEEP

    12288:/Lppy+p5WKBmzEPls2uIadm+BxUwNWh2RXVOjQMLg1qPRIZ0:jDH0zEtFuIadXxUoWh2LM0YOm

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • f9d9606cb11d5332000e082c5a2fea6c_JaffaCakes118
    .rar
  • ReSystem/ReSystem_X32.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • ReSystem/ReSystem_X64.exe
    .exe windows:5 windows x64 arch:x64

    e57fc6312ca3ab50d2df0dc1e0e64207


    Headers

    Imports

    Sections

  • ReSystem/Readme.txt
  • ReSystem/Res/Icon.ico