Overview

overview

10

Static

static

10

a6d7aa58dc...3f.exe

windows7-x64

10

a6d7aa58dc...3f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_8cb7b2a4f602472134122724e3cd114390978115f0ee04e982dec9c33953dba1

  • Size

    610KB

  • MD5

    aef481dddd3b0a5a31b79de57a0ecbac

  • SHA1

    0d45c9148ecb074c584860edabf916ccc0544b82

  • SHA256

    8cb7b2a4f602472134122724e3cd114390978115f0ee04e982dec9c33953dba1

  • SHA512

    99bfdbb6c287936f399b126cef8d2001f699e8e2d492698608ae19e23f2d55b618dd47b37202a0f5769669e7e890ae699e2763efe4a951fee30c1cebfa6b78d1

  • SSDEEP

    12288:xJqcsz5ksfMA8SJtcfjNKQsYs175DSLrduFl0QgyidDnMJ:xJqcm5bhtwsjYs11ordub3TODK

Score
10/10
upxsocelars

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/jsdnjd1105/

Signatures

  • Socelars family
    socelars
  • Socelars payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_8cb7b2a4f602472134122724e3cd114390978115f0ee04e982dec9c33953dba1
    .zip
  • a6d7aa58dc232ea5d2ef0b0be86f0cbaed9b7efedc9a6ddc9dfff09b2e52323f
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections