e5abd9336d54388d2a4e3cfa10527dab_JaffaCakes118

General

Target
e5abd9336d54388d2a4e3cfa10527dab_JaffaCakes118
Size 87KB
Sample240407-x2c7ksce26
SHA256 d46011751dcab027d672562b4f289e6570d68df4ba039f8c2b7c7a16c5eedc2b
MD5 e5abd9336d54388d2a4e3cfa10527dab
SHA1 4d95d62fec79d0cc0e2d9c0455ee5cbf90df9a86
SHA512 e673ccb2970db2deb568abd7ae7b5b87ce12104c6c06eb630e7a9f2f5a9edc1374a51064480e27f9885ddd4971a01331bab1ad7fc0712d5c7f2fabb40756df54
SSDEEP 1536:3+wzevThAGTcjxWHbnv+Gyz5oj40VWNXX1K4U1L2MxyjZLEbHF8Uo:3+wavThAwc07v+TV8LVKU4U127jZLEbW
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
e5abd9336d54388d2a4e3cfa10527dab_JaffaCakes118
unpack001/out.upx

File Explorer

e5abd9336d54388d2a4e3cfa10527dab_JaffaCakes118

.exe 87KB
out.upx

.exe 48KB

e5abd9336d54388d2a4e3cfa10527dab_JaffaCakes118

SHA256 d46011751dcab027d672562b4f289e6570d68df4ba039f8c2b7c7a16c5eedc2b
MD5 e5abd9336d54388d2a4e3cfa10527dab
SHA1 4d95d62fec79d0cc0e2d9c0455ee5cbf90df9a86
SHA512 e673ccb2970db2deb568abd7ae7b5b87ce12104c6c06eb630e7a9f2f5a9edc1374a51064480e27f9885ddd4971a01331bab1ad7fc0712d5c7f2fabb40756df54
SSDEEP 1536:3+wzevThAGTcjxWHbnv+Gyz5oj40VWNXX1K4U1L2MxyjZLEbHF8Uo:3+wavThAwc07v+TV8LVKU4U127jZLEbW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

53376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 c6d2f4fcfb1b9af7e880c85ce2948ff55bb56094d1411108d7c1aa6e6beaf57f
MD5 5eb49369f6a0bd26f150ba46a8fdbe01
SHA1 ddc90bfae70823c728796b06bc5d9a6f764c02a5
SHA512 7b650f843084bd78de2edf8ff6a657c46472b708f0ea6aac3df63d2b374cddd34181472a049dd80c00364fa499b47ec64d08db9d351a0defd15c365195becfa5
SSDEEP 384:Ch7sf+VIkFIWma/o/W+MsEqW5CMh6lTgrw89qi6Lz9W14A85767AWQk5R0T1Qi9s:Ch7shkFRA/o5VMN7Zkyk5R0VW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6188

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

e5abd9336d54388d2a4e3cfa10527dab_JaffaCakes118

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

e5abd9336d54388d2a4e3cfa10527dab_JaffaCakes118

generic

out.upx

generic