General

  • Target

    25c103fd7c5dbef9962f761d5e995d78_JaffaCakes118

  • Size

    610KB

  • MD5

    25c103fd7c5dbef9962f761d5e995d78

  • SHA1

    a36c279c23beab534f6cf4cb6d07b97689b2d9fc

  • SHA256

    e6b3853cd50ab4d6bfca969c3cb9fd3ca57fd3233f811b34ecaca4442270e31c

  • SHA512

    c00da8b20dd4858ff2603020254282c1d5f23dd62a92c4d169bb4d8ce12c622804d81fef681d9ad24c8b690ad52eee28569c14f7d75c08aac7e26bb399313f2b

  • SSDEEP

    12288:FB2GhESdI3TgQ5eVjlF6Q/QsGWxoTQPo3X1mrzGJqhwvCT9:KG3q3TeV51/Lm2UX8rzGUhwvG

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 25c103fd7c5dbef9962f761d5e995d78_JaffaCakes118
    .zip
  • CMM.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • FCorp Software.url
  • Info.txt
  • MyExtension.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Support.txt
  • What's New - CMM.txt