General

  • Target

    3c45bdefe3dd1b17e32e370589d65846_JaffaCakes118

  • Size

    454KB

  • MD5

    3c45bdefe3dd1b17e32e370589d65846

  • SHA1

    89f831a3efe8e9bfdd74ac680a3e193ee0497f42

  • SHA256

    5df658e5ab04beb277092b6ab50bbc3355d90687e54c542e0fd382d837926a8b

  • SHA512

    45fe022fac9a217aed23f25f759e57deaf9e65b8da8dc25d908a05e5c7316b711aed40317f7febec56120629b647acbae7e0b803685dcd64e57fc1d3db043011

  • SSDEEP

    12288:SJfapKHMv6orxg0LdGRExH224TEupYQPWw3HaBMQY6dDoexiyGn:SJfapAMv6esEx5up7x3HaZdDXs1

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3c45bdefe3dd1b17e32e370589d65846_JaffaCakes118
    .rar
  • 050215hyrm/hyrm.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 050215hyrm/redme-jfsky.txt
  • 050215hyrm/更多软件.url
  • 免费电话_免费打手机、座机、小灵通_铁通RedVIP网络电话.url
    .url
  • 让你放心、永不中毒的浏览器.url