f62995e0d8eae420f20773a3f757f73d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f62995e0d8eae420f20773a3f757f73d_JaffaCakes118
Size

43KB
MD5

f62995e0d8eae420f20773a3f757f73d
SHA1

b4e0679d8832eeccdd609495c3e6eb0c7ebc3154
SHA256

73ff232a3d5a5b4bbd14d6e62f8f6edf85bda8db1c713db58d560e71b5c96484
SHA512

3dd23c9ff110436786b3d292313913f010ba41dff01b131536bd23546e2a69003d5cb1d30ea720f8709463877cbee8a4dd41d177947dee8ed482f554024b1fe9
SSDEEP

768:DdAnS1NH+GLZcshRrv7ZOjm/DFZJGMUQSl/kMBV/VyYB8kzN:DdAn90ZnbrDk0D1GMwl/kMj/VLhB

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
f62995e0d8eae420f20773a3f757f73d_JaffaCakes118
unpack001/out.upx

Files

f62995e0d8eae420f20773a3f757f73d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.f0Gx
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ