General

  • Target

    a80d9f57d44c84cd334d5ee47e8e4c99_JaffaCakes118

  • Size

    293KB

  • MD5

    a80d9f57d44c84cd334d5ee47e8e4c99

  • SHA1

    7cd82e1a5b713c0500b19660ed7f5f172f0b2e1c

  • SHA256

    61ab7b39c2dbfbd774a8f248bb82e01b7bf561cc33f1b9650f24d9c87661545f

  • SHA512

    213436f307ccabbca79796d44c43ef7c01e6eb177089d7f0ca98bbf60a8db9e1d0e9af42021a234d67ce97f7dac6371cd60e82236f76d4f011320d9b88ae0c03

  • SSDEEP

    6144:yz+ZIja7JiVzDfdUITRilQ37imhVltGNPl4/fRq4vTBxvVjk5CKO/:yz+4KMVzDfrTRYQ3+WltCiHE4vTB3cw

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a80d9f57d44c84cd334d5ee47e8e4c99_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections