General

  • Target

    JaffaCakes118_6eb71d39333e2eddb8d4387f4693e810

  • Size

    687KB

  • MD5

    6eb71d39333e2eddb8d4387f4693e810

  • SHA1

    1a871240a1ade30e60c42442d780a246ac3b8be0

  • SHA256

    5a70d8b487c09a757e4edd118d30ac9c37d8fe24b0009289c79e060446144fd9

  • SHA512

    beb5d7a9a5f59d8f996bb093e323fde8b52df97b5124881fde19b0d2985d99ce75f3398ce3ca3ea9e2f638fde24bbaab53649af9ae1a447101400e424cf1d77e

  • SSDEEP

    12288:AUcrY8driIQHG2D1axkPKdbo4vp+II3993kdqmeCdgb0oU+XpZyjUpPy31c:jWY8BiIwG2BJ94vp+I09Voqmh+5ZyjcC

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6eb71d39333e2eddb8d4387f4693e810
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections