ece97507734ce409bc64184ff0b745c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ece97507734ce409bc64184ff0b745c9_JaffaCakes118
Size

764KB
MD5

ece97507734ce409bc64184ff0b745c9
SHA1

acd210aa1a1b79508fc0d5ad0e6109a93a19df1f
SHA256

0bdc046b02ebc44c6759567b531171c9e70148a93ad41df7074f747afad18eeb
SHA512

bf269a33986768c45cd03508243a792835d8dfb98ee30ff8ca21ba39431b54c18f81c17232d5aa63ae323b01f1c315a9efd1a2a2cc28ee3baa547aa01c178cfd
SSDEEP

12288:eRpta2hS//T0sNl/swmSbE5ig26RFI/S+AuuUpE8MzVr0orH5ua7oaqJHjs9/5zm:enQ9YqsxyEEgTLNnYE8a0G5tE+97EczY

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
ece97507734ce409bc64184ff0b745c9_JaffaCakes118
unpack001/out.upx

Files

ece97507734ce409bc64184ff0b745c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 848KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 763KB - Virtual size: 764KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ