General

  • Target

    8f36707a884175fc489962aaf56e2a5f_JaffaCakes118

  • Size

    233KB

  • MD5

    8f36707a884175fc489962aaf56e2a5f

  • SHA1

    74a2094e7beffb90408a863e9b55223698b932f8

  • SHA256

    eeccab59578ff3ee1e4e88da4edcb5765ef4380b8ca40ca8594b15e82cc7bcb2

  • SHA512

    eb47fb50ceea3717122f0fb0a11fd047ad5d315158b250442debcb0648357b079a43e484233666241c56116ad1f26b476d21935c49b2e2e8bcaa606181ec899e

  • SSDEEP

    6144:G4CFfifD2gVKVTQQ249HZ52KTh9XKOCgLJacj5/AZtRs2a:GXgr8VMQDT52WXKq9fj5/AZjw

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8f36707a884175fc489962aaf56e2a5f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections