General

  • Target

    44e69c2dffe32ea681a5ca4dd7136991_JaffaCakes118

  • Size

    301KB

  • MD5

    44e69c2dffe32ea681a5ca4dd7136991

  • SHA1

    60d530f3707ea4277f4b6cd35570e077c062af2a

  • SHA256

    afaaa95d237956d8d47b53d3a8e9979ddc4fa6a895e2959ddfcb7b8c39527a96

  • SHA512

    41e1460ba7997bd20e63d80a193b3e5fe79cafaeed5dcf656d1a67c37ea0d6a398836168e25668983ae3f42469fd6d475b6fac26a1a192ea0a10cd5a3d988d90

  • SSDEEP

    6144:A1VhCtMk/YMaeTO8d7Hf4nGH7E0066hCRL3enWsqVaZsyEaxzS:A1V4tCMnVdDwFvhowqVKvEa1S

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 44e69c2dffe32ea681a5ca4dd7136991_JaffaCakes118
    .rar
  • Location.dat
  • cgi.lst
  • color.ini
  • last.his
  • ntwdblib.dll
    .dll windows:4 windows x86 arch:x86

    e3991199550f9239bf51cc49f17af30f


    Headers

    Imports

    Exports

    Sections

  • portlist.lst
  • proxychk.pck
  • proxyset.ini
  • rangset.ini
  • readme.txt
  • rpc.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • smtpval.dic
  • sqlcmd.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • user.dic
  • weakpsw.dic