General

  • Target

    8e8ba0662043efda7aec96dd1e1bb7c3_JaffaCakes118

  • Size

    240KB

  • MD5

    8e8ba0662043efda7aec96dd1e1bb7c3

  • SHA1

    fbcc7f95c1f6c0b6ede1b28e14b4d281f326353d

  • SHA256

    a49d59a40c1092fad50d6df664f66bc11593402f0bf0e37720f1ffa01d568532

  • SHA512

    7d6cf787b686a0ca335eea4b55260a4f1a55fd92b018a039cbe80793dec63be0ebc0b68fa58a5392eaf6f67b29c080cc61410c491660ddfd1c45a5a83fa9c98e

  • SSDEEP

    6144:DUc8SY8u+rv6Kl9QFhC6z3sbS4P2UI9icyXV13kPKuzGnVAqD:DUcrY8driIQHG2D1axkPKdt

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8e8ba0662043efda7aec96dd1e1bb7c3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections