General

  • Target

    3d13b1a264a8f080a9fc94dd90c5682e_JaffaCakes118

  • Size

    1.1MB

  • MD5

    3d13b1a264a8f080a9fc94dd90c5682e

  • SHA1

    aaf2fb124e5dfd53cae20dd7aa2c004a3505a0b0

  • SHA256

    8fd2e22a6fcaee14d0de0d2053fe854e0ddb7f0c7300a25b0c6e407cbad7aaa6

  • SHA512

    f0ec9a78fd492372085c1e46aa81c84d036cd00ec9497c07d8619b49bd3fd23fd17c1097bb0a1cfa2fd64d240b46aa39051778abc3054593906918f0db5c2e12

  • SSDEEP

    24576:zYUW28QOx78TOGuOWcLLcLCfD9pwP1iELiWoWXudeZj111nr7NY:/Ox7iOGjWOxpeiWL+eJ1G

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d13b1a264a8f080a9fc94dd90c5682e_JaffaCakes118
    .rar
  • ntoskrnl.exe
    .sys windows:5 windows x86 arch:x86

    ca0b50edc2ad0eddf86d2589b79a08ea


    Headers

    Imports

    Exports

    Sections

  • wfps10.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • patched.dat
  • ws.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ws.exe.manifest
    .xml