General

  • Target

    41a02881a4666e56ff4c6e3f9551381b_JaffaCakes118

  • Size

    12.3MB

  • MD5

    41a02881a4666e56ff4c6e3f9551381b

  • SHA1

    35b381ef44781ca1a8dce6a900a05d814e4e6c22

  • SHA256

    e3671c071cbce7129c34aa7cdce2b2cd30aa037534e92d892cb441afa52e3d1c

  • SHA512

    55787600731cc39ce2659241acc4d10ad4603cf4551d387c5b68e22ddcac7410003fdad8731b3a9cbcd8baa8eb29730301c827d8a0e870cbd0f7014867ac5202

  • SSDEEP

    393216:edJGJA7hIT63QzHDLJtLEOk75RxXVEkKXu1g+c:04A7hIBxJEOe5R9VnKh

Score
5/10

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 41a02881a4666e56ff4c6e3f9551381b_JaffaCakes118
    .zip
  • How_To_Be_Sure_of_Heaven.pdf
    .pdf
  • Setup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections