719ec6e9d02f6d2392506180335017db_JaffaCakes118

General

Target
719ec6e9d02f6d2392506180335017db_JaffaCakes118
Size 121KB
Sample240401-pcbcpadh81
SHA256 5e1257a7d9d5167569f8478acea3ab7ca305094ca9f72cd546db49fe3b87a965
MD5 719ec6e9d02f6d2392506180335017db
SHA1 4d18b602f609d1236fb8b652bc7c5789e754764c
SHA512 fa76261b8fad86e744d65410e5acac59d6c18495c840765f8b40bdda2306d99ac4bc3e332d14d852b104b35fbc85aeed632937da328f6b5fbb71bc1488c64380
SSDEEP 3072:G63GIUchJGTgfB/ta4u661a9srlWr+beV+A5gBcGO+CfSMTA1:G63GASTywD6Vzr+m6J1
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
719ec6e9d02f6d2392506180335017db_JaffaCakes118
unpack001/out.upx

File Explorer

719ec6e9d02f6d2392506180335017db_JaffaCakes118

.exe 121KB
out.upx

.exe 7KB

719ec6e9d02f6d2392506180335017db_JaffaCakes118

SHA256 5e1257a7d9d5167569f8478acea3ab7ca305094ca9f72cd546db49fe3b87a965
MD5 719ec6e9d02f6d2392506180335017db
SHA1 4d18b602f609d1236fb8b652bc7c5789e754764c
SHA512 fa76261b8fad86e744d65410e5acac59d6c18495c840765f8b40bdda2306d99ac4bc3e332d14d852b104b35fbc85aeed632937da328f6b5fbb71bc1488c64380
SSDEEP 3072:G63GIUchJGTgfB/ta4u661a9srlWr+beV+A5gBcGO+CfSMTA1:G63GASTywD6Vzr+m6J1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

69632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 2255fe00f002d5a5aa99bf5d19d7b7a319dc8586b526cd132bcca41cc7a01d21
MD5 8b63652b4140c443c570073f59516bd7
SHA1 8b6bbe574a68ed3206c1413058ea1fffeff6a0be
SHA512 37ff0497335527e104d8f0350026a23bd6b0dadd0359d6aa641fb8b59ced90fec9719e1e5b7e2dfbd16db63b6ef32a65caadaa3d52c32f68546b20a8f3bfd752
SSDEEP 96:9vxJARtmPhpeSP+KYyoMZTGzqzusxk8+3CDH8q1LlgN30l7p8l:9vxJqAPhpeS1ZK4O3CDHjLlzM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7440

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

719ec6e9d02f6d2392506180335017db_JaffaCakes118

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

719ec6e9d02f6d2392506180335017db_JaffaCakes118

generic

out.upx

generic