General

  • Target

    JaffaCakes118_979f3b58bfb137b9365415fb33d7aaa3

  • Size

    164KB

  • MD5

    979f3b58bfb137b9365415fb33d7aaa3

  • SHA1

    a6976909a55c4f90313a657efe05bab1dbe61b58

  • SHA256

    aa8de0c2cc4b1a9ad64f59136d189bb8b914cfe01e04b09b73743ba729a2afb8

  • SHA512

    51ddf24af2edb18b2ed55ed53cd2edd507600c642d5906168b247366b42b6a73a055789854252bad690dfb0f753136e018158ddcc55ac42c7f87affb82e653bc

  • SSDEEP

    3072:nGbjlUV7Xbs5gwRBr8TbA69YtyxOrh8ZBipCpvAw88AsntWXTSlCXQ9VGLDFG4FW:olUV0gaBAbA69YtWOrDpsNWmtWjSXGVj

Score
10/10

Malware Config

Signatures

  • Blackshades family
  • Blackshades payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_979f3b58bfb137b9365415fb33d7aaa3
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections