General

  • Target

    5338d857a677e7104c3a1f7b44e1120a_JaffaCakes118

  • Size

    284KB

  • MD5

    5338d857a677e7104c3a1f7b44e1120a

  • SHA1

    9958914fae4145fe8196f293f79d96ab6aabd980

  • SHA256

    6823a6d7927787916c44d447c370ef01f7aa18cb1b99cbe5cc15939e8d4475b2

  • SHA512

    4fff1082669d83cbcf5ef685cfcca2514cefaabfed4235c61b04b04257ac8b2e08c6be96e734ab0885db1f2404ff44f2c78761158c73c6dcb340d5925599f378

  • SSDEEP

    6144:Ilb6SDOiIN4o2cOMayarS0IjX7n6wXmzbBFXQ6:I0Siiu2cOMayaZerXXmhFXB

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5338d857a677e7104c3a1f7b44e1120a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections