ea7c1830e1218ea5877960828ad212c3_JaffaCakes118

General

Target
ea7c1830e1218ea5877960828ad212c3_JaffaCakes118
Size 109KB
Sample240409-vmqg9agf2s
SHA256 c6e300284fb3dc25952cac4fde8ea7a97d766f75d58a9200e2a1b0080e722955
MD5 ea7c1830e1218ea5877960828ad212c3
SHA1 3661ee082fb82b806dbc2fb69b11d8133834e515
SHA512 3ed7904f167576fed7a0ace61c430f175f1f34882fce7b5bebbf94aac70c96953a370a7a9f12aa0f4d545216cbd34b5983a71d0c4a7703080323ac2810e8e36a
SSDEEP 1536:4B9aLUkevAa/tKxxObOY1Nk4YNBj5bD/lk2P5D10Sn3mcqUF+22hQI9X7:K53bOUGNZ5Dq2RJRF+1pJ7
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
ea7c1830e1218ea5877960828ad212c3_JaffaCakes118
unpack001/out.upx

File Explorer

ea7c1830e1218ea5877960828ad212c3_JaffaCakes118

.exe 109KB
out.upx

.exe 128KB

ea7c1830e1218ea5877960828ad212c3_JaffaCakes118

SHA256 c6e300284fb3dc25952cac4fde8ea7a97d766f75d58a9200e2a1b0080e722955
MD5 ea7c1830e1218ea5877960828ad212c3
SHA1 3661ee082fb82b806dbc2fb69b11d8133834e515
SHA512 3ed7904f167576fed7a0ace61c430f175f1f34882fce7b5bebbf94aac70c96953a370a7a9f12aa0f4d545216cbd34b5983a71d0c4a7703080323ac2810e8e36a
SSDEEP 1536:4B9aLUkevAa/tKxxObOY1Nk4YNBj5bD/lk2P5D10Sn3mcqUF+22hQI9X7:K53bOUGNZ5Dq2RJRF+1pJ7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

142112

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 58fe7ad86b7ae006dc42e0a8cc9b6d5a1ef09c5f1968b12f12e168e706556818
MD5 d2576120b22dc3479e219057793933f2
SHA1 1b37bb0d8aaa9b9ef49fde6266f0c33f868e1598
SHA512 8f92949a4183725c2ccad9bfcbae33a4a9d3f4f71a157a131a3c3ff72919bafdfd3b63609be276d2f50f0a934e45a0270d087466499ee355d88376e1d52e58af
SSDEEP 3072:RBJea2D8dqu9eP3Urt0WcAPf+uV0kvT+NZ:Rz/2D8dqu9evUr2L4f+u60+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ea7c1830e1218ea5877960828ad212c3_JaffaCakes118

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

ea7c1830e1218ea5877960828ad212c3_JaffaCakes118

generic

out.upx

generic