f07224b7cfa334be2178ff5faf77aee1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f07224b7cfa334be2178ff5faf77aee1_JaffaCakes118
Size

24KB
MD5

f07224b7cfa334be2178ff5faf77aee1
SHA1

618994b490818a1a4be9afdb00dc6f4430186c79
SHA256

c799cc7fcea1416a9f5eef406d59ade93f1d58eb19d10c68afa33cf1d42535e3
SHA512

f59dbf0db476019cbce97f2cba78bb51836398b58ac8925cb3876b68b5e39028fc1f0b9b78e297ec838b6502507d9087b992b29b4051adc17a39dce76f5450eb
SSDEEP

384:HaE+2f4jiI5JELj+TlgO0aWmUFWPwSeDDbVlMKkkAbo6FZbAos5GA30jm:B+M4eAEsVWmillM9kAbh7bE

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
f07224b7cfa334be2178ff5faf77aee1_JaffaCakes118
unpack001/out.upx

Files

f07224b7cfa334be2178ff5faf77aee1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ