General

  • Target

    6f1b7f65d3c0a03bc506124be30421c1_JaffaCakes118

  • Size

    232KB

  • MD5

    6f1b7f65d3c0a03bc506124be30421c1

  • SHA1

    87946f9411532b5661d92a99db5d838277ddea90

  • SHA256

    b0bf68b775f577180fa1f332b0fa7aba1ae4316c87059b8821498b5f193b1096

  • SHA512

    7e2b3350555fc7a1c7dd6554f8228360ba05bf3cb12c38fb2b58ac93fef6d01e0f18e0344c9a69d693d3bc29776dcaf4056b135760270ddcdce3f9adfe316ff8

  • SSDEEP

    6144:O4CFfifD2gVKVTQQ249HZ52KTh9XKOCgLJacj5/AZtRsf:OXgr8VMQDT52WXKq9fj5/AZjs

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f1b7f65d3c0a03bc506124be30421c1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections