General

  • Target

    f3bb0940df959bbc72af7c733a7e4c6f_JaffaCakes118

  • Size

    344KB

  • MD5

    f3bb0940df959bbc72af7c733a7e4c6f

  • SHA1

    c7189227a418e20c15af80dca66b114fc7c52b8f

  • SHA256

    b9d2b92a14eeb07b5a4b283b74853085569036e22bc1a18807c781e7576c83ab

  • SHA512

    97226a3d3cd140ca59a4a99c0cb2ba7c44a0970d960d53c7440e4e122ab1d6235279542f2a17f90bcc16e60310b579e61d0fa7553689f3bb310ec6b27ba943d2

  • SSDEEP

    6144:hMggLtESuJHedbXFN+xTHkPgVSf1wEC2GYOf71smQcV9U:hMjLtExRedbXFYIvfbyYshsn

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f3bb0940df959bbc72af7c733a7e4c6f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections