General

  • Target

    2e3398657a6671480674c5aafe626ee3_JaffaCakes118

  • Size

    292KB

  • MD5

    2e3398657a6671480674c5aafe626ee3

  • SHA1

    cbbb9457f6af6bd283ea73465e0d6f30cb167151

  • SHA256

    a90537f53008bdb0137f5d35041ed9f982aac4fe6603c381ed29f10d7c72349f

  • SHA512

    b27bc1e9ef46e342d04218314441fa78aa8aa5cc24c57af5352d4fb383e0671fc85a2631fe55f36de3d2a4d0ff6242c84c78aea79c54d4a263c83053c8b47676

  • SSDEEP

    6144:XkaaK/kAFuTUlhlgsl+XqmBxEEvn0fzdcE77u3sQ6ac0U1Dj5eeQPDII:XkSe2lgS221fzOGRa3U1kLPMI

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e3398657a6671480674c5aafe626ee3_JaffaCakes118
    .rar
  • Fenstername.ini
  • Konfiguration.ini
  • Puckyworld bot 3.0.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections