General

  • Target

    JaffaCakes118_e5b55676eba285d366e2c98d42b0a136ad0464293a07f406f7c7f3cf05dbbe2b

  • Size

    179KB

  • MD5

    80ed6e162e4470ecc8565916135378e4

  • SHA1

    827d483059eed04d65cd420ef89313cd44f29c94

  • SHA256

    e5b55676eba285d366e2c98d42b0a136ad0464293a07f406f7c7f3cf05dbbe2b

  • SHA512

    68eeaf76f6d3779b9d06513a49da09aef6d88a808071fae46fec345a9a6b5d2004f57f06fbd1b468a3eec1e8c9d77cd3a331761e77d15b05ac1987e8c10a0f88

  • SSDEEP

    3072:Z15LP/rwSHtto/yDo2gRChQ4EdxpCDSVsUHIHVHJDKIYtt5bwI1BnRk:JkSHDo/yo2gRMCdjLkmFPbwI1Bnm

Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_e5b55676eba285d366e2c98d42b0a136ad0464293a07f406f7c7f3cf05dbbe2b
    .zip

    Password: infected

  • 2020-04-14_20-25-01.bin
    .exe windows:2 windows x86 arch:x86

    67afc3d7f748518bc69e619e8576d6f5


    Headers

    Imports

    Sections