General

  • Target

    2c8378e30a256e74419ddc030538ff37_JaffaCakes118

  • Size

    1.3MB

  • MD5

    2c8378e30a256e74419ddc030538ff37

  • SHA1

    29a664a5d39b75f0674ec746e4ca56b40f55bd66

  • SHA256

    6ee324690e046487915ee3fee9fc1e18536a7eb3185b36d90639d83ec760cb3e

  • SHA512

    807ef204b5ecebf8eb5d831a713d61ad5e46d95b9bf1b17b233625db99690e39911410ab29420e0691822f6bdd283941aa990cce2e8b736b7c74f90c3f31c635

  • SSDEEP

    24576:JMETkqPgcKF6SCz6dAZFAeJO+xwt1py4P0t3boWuIK4EWmFs4phCfaxO/L:ZT7gcKWz6j+6tm44bjEJv9xO/L

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 2c8378e30a256e74419ddc030538ff37_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $TEMP/TeamViewer/Version4/TeamViewer_.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • .rsrc/GROUP_ICON/103
  • .rsrc/ICON/1.ico
  • .rsrc/MANIFEST/1
    .xml
  • UPX1
  • [0]
  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections