General

  • Target

    ff7aa14879cd7d76e69a5d9c9c5c14bd_JaffaCakes118

  • Size

    131KB

  • MD5

    ff7aa14879cd7d76e69a5d9c9c5c14bd

  • SHA1

    19f9c2fd42c6f47d3ef2a3911cb3b8dea7d98d6b

  • SHA256

    9dfff914fc620c0416fc1a2f43e2dffd908d3d95a52ddb7eb17908f0c5f1d74e

  • SHA512

    22b8c9751889ca846ee2de4cba37513b08efbfee6135ff54910ba09776afc7675dcbc8fdc79a28d90f5fb078eed0a7506c87e4b056d9b62af072cdafdedc6da6

  • SSDEEP

    3072:9MDqZAcJbKwDYcofSXx7LHRxgL2oE3Qt1UkcBoLk:pZZ2SXRLHRKL59fUzL

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ff7aa14879cd7d76e69a5d9c9c5c14bd_JaffaCakes118
    .rar
  • xxjpq3.8.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url