General

  • Target

    JaffaCakes118_69c81a9e564cd5b1f43cd95d797db43c

  • Size

    242KB

  • MD5

    69c81a9e564cd5b1f43cd95d797db43c

  • SHA1

    76ffdbf25c97048bc69c808bea3cf11c4e625d7e

  • SHA256

    9972eff09050a9bc8272c1588ba2b7a864b74fe4591e838cc742e28a8adccf16

  • SHA512

    5a437c23f74b293f1e1818ee456d2f9b98db0e2830343d839fd8e10a012844ed340c507067b599a2c37e89008cfcf0ff5c29f7a267ef41502031ad60a2476007

  • SSDEEP

    6144:y1iJcYtR1HsvpSHY7KoSrfTNBuzZZcA1wnOLrMM4IX:ykHcpSHY7VSrfT2/czO3HPX

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_69c81a9e564cd5b1f43cd95d797db43c
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections