General

  • Target

    JaffaCakes118_ff25d089ae0d0281fbccc36c9c56f0812abaf8b0f05a6f26015c88ed97948ad5

  • Size

    605KB

  • MD5

    2d253c3f432ac3405c63058b797e3205

  • SHA1

    842c7e31427fc73e162315f28ded970b375aa7fb

  • SHA256

    ff25d089ae0d0281fbccc36c9c56f0812abaf8b0f05a6f26015c88ed97948ad5

  • SHA512

    5bc31de8206752f2a9615c788a3346c2158e51a4ca89e3f6f1eb9c9a7e70fe56d879dd4f972de32fa818d3e0d822e3e4c478fdaca6be65cdfc84dbe9b9ffba8e

  • SSDEEP

    12288:Rfj9YE1ghV4Hd6LGjGSN3Q88wvFf/iyuXLUBb98pHLG5Q7K9f37:RfjyEaQCGaSNRJ/hyLUz85C5Q7K9f37

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_ff25d089ae0d0281fbccc36c9c56f0812abaf8b0f05a6f26015c88ed97948ad5
    .rar
  • INQ8593.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections