General

  • Target

    JaffaCakes118_6082f0bace0e9fe5a2c1c82f2d572880

  • Size

    382KB

  • MD5

    6082f0bace0e9fe5a2c1c82f2d572880

  • SHA1

    b5f369b60b12451a717a843bbd00bceeb9ea7d39

  • SHA256

    897d66b08cac0d05c5ec922825f1bbef1d4b5eb59870d6ba79501cfeb7af94cb

  • SHA512

    649c83aa4bece8695ab82c93f2f1559316242ea97892506529069ee4fc6e1118298d383c9aacbe4a6c0b50618ca4cb3a241c544903889748fb766e6431bdc50b

  • SSDEEP

    6144:vlb6SDOiIN4o2cOMayarS0IjX7n6wXmzbBFXGeCQScV9U:v0Siiu2cOMayaZerXXmhFXGeCj

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6082f0bace0e9fe5a2c1c82f2d572880
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections