General

  • Target

    2bf5d920db19bd6b45aba0280f7c7178_JaffaCakes118

  • Size

    355KB

  • MD5

    2bf5d920db19bd6b45aba0280f7c7178

  • SHA1

    6fc520148ca709101d1a66e3e352e4246d3cb445

  • SHA256

    7b2294c0f53313c0390554f6d0cb0ed1ed2c1679a80881efc3da8bea837500f4

  • SHA512

    21499f68afb3e51c34519aff01642bb5611952a471d8c2a3ba5fb80f4280f52d60a221c3748e9924c62bca6775759bf21fc68ee999c27817d6bd864c5cdea092

  • SSDEEP

    6144:TPHMR7NJa81xnmBkP5pwSX7jRpj1fpRBNBS4wm760X2wX1e7/n3:TkRPxnm+pVX7Vj3B7TwMxV1Sv3

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2bf5d920db19bd6b45aba0280f7c7178_JaffaCakes118
    .rar
  • hyhd2004/hyhd2004.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • hyhd2004/redme-jfsky.txt
  • hyhd2004/更多软件.url
  • 免费电话_免费打手机、座机、小灵通_铁通RedVIP网络电话.url
    .url
  • 让你放心、永不中毒的浏览器.url