Overview

overview

7

Static

static

7

0MemMaid.html

windows7-x64

3

0MemMaid.html

windows10-2004-x64

3

memmaid 2....up.exe

windows7-x64

5

memmaid 2....up.exe

windows10-2004-x64

5

memmaid 2....er.exe

windows7-x64

3

memmaid 2....er.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3c44e441efccac91f56a1e210c8b448c_JaffaCakes118

  • Size

    783KB

  • MD5

    3c44e441efccac91f56a1e210c8b448c

  • SHA1

    eb19f8213d754ed77bc8af5d90516946f8cbfbd0

  • SHA256

    63f0dcfde255da31cf17cf0c5292d1a44f3382e221b039502a2d13d7494917ad

  • SHA512

    22c26318ea27130d18eeb399940b0ae29382f372c2be2125e90c8db96721d0b0ac75a140365f1c67481d3f5f4ecf38d80bf149a62d76ecb06dac8ee3fbcc171a

  • SSDEEP

    24576:e+XyWAFtBIVWokKuLaBVQdq2r/xjjkwymg98Kp:nXQowKtBVQM2rp/gRp

Score
7/10
upxaspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 3c44e441efccac91f56a1e210c8b448c_JaffaCakes118
    .rar
  • memmaid 2.3 with keygen/DinarSoftMemMaid_en.CAB
    .cab
  • 0MemMaid.002
  • 0MemMaid.005
    .html
  • 0MemMaid.006
  • MEMMAI~1.001
  • MEMMAI~1.003
  • MEMMAI~1.004
  • MEMMAI~1.999
  • PROGRA~1.000
  • memmaid 2.3 with keygen/DinarSoftMemMaid_en_Setup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • memmaid 2.3 with keygen/cr-keymaker.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • memmaid 2.3 with keygen/memmaid install + keygen.nfo