General

  • Target

    JaffaCakes118_6c7639a4e8ffb3325bd4169a66204360

  • Size

    233KB

  • MD5

    6c7639a4e8ffb3325bd4169a66204360

  • SHA1

    f0ec98f3ec850274607f5f32b007c178534981a6

  • SHA256

    5fca7b60c223f0cd83fd11627bcbad666b1bfb65417786b2b83a702ed34c8751

  • SHA512

    ececb83b1f9f6db7b01e6cdc3615801e386897b3a7ce6461715de2e2e3e9ceb1aadac933b542c4fb91a2092b42a32fb1242b6f095d001ca2456b5b13ffc418a3

  • SSDEEP

    6144:fcERZnnKkgYHi27BfOJMOVvZJUYQJoAlo1X33qLwRkEI:fcEjnliaO+OVvj7dn3GEI

Score
10/10

Malware Config

Signatures

  • Detects Strela Stealer payload 1 IoCs
  • Strela family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6c7639a4e8ffb3325bd4169a66204360
    .rar
  • Config.ini
  • Juisreader.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections