ff8964c8f5d252262d791d51888448c0_JaffaCakes118

General

Target
ff8964c8f5d252262d791d51888448c0_JaffaCakes118
Size 14KB
Sample240421-san3jsdf77
SHA256 782493c1eec3bf3ef0f740d74f71bc17d188818469c96035283f1b25b1f66b7a
MD5 ff8964c8f5d252262d791d51888448c0
SHA1 9c0fb272ab6e65ab7655dfac8b9ee7d5d4fdc596
SHA512 a326141a448159d44f2855fec49f7bb29c90915c66c15da05cad6ac02ba9def8a7a11d96ddaf7f819ee912366958e8df10f7c67e7ebb8b9657c14dc9defabd66
SSDEEP 384:cdGT27FyStC7nXxqYK/cyUlv3b0OQYYqHpzN9r:HC/yXYj/cDv49mL
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
ff8964c8f5d252262d791d51888448c0_JaffaCakes118
unpack001/out.upx

File Explorer

ff8964c8f5d252262d791d51888448c0_JaffaCakes118

.exe 14KB
out.upx

.exe 26KB

ff8964c8f5d252262d791d51888448c0_JaffaCakes118

SHA256 782493c1eec3bf3ef0f740d74f71bc17d188818469c96035283f1b25b1f66b7a
MD5 ff8964c8f5d252262d791d51888448c0
SHA1 9c0fb272ab6e65ab7655dfac8b9ee7d5d4fdc596
SHA512 a326141a448159d44f2855fec49f7bb29c90915c66c15da05cad6ac02ba9def8a7a11d96ddaf7f819ee912366958e8df10f7c67e7ebb8b9657c14dc9defabd66
SSDEEP 384:cdGT27FyStC7nXxqYK/cyUlv3b0OQYYqHpzN9r:HC/yXYj/cDv49mL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

105616

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 b657303a673cc16881c461159ebf0b7706b3600e50558c779af607d00d78c021
MD5 cabf52a251854ae13823750aaf05bdf3
SHA1 932ebd4ae17670c7de39be516ca24d9ab45b9e08
SHA512 c496498849d88ecd607c7fb499a1396fac26cc4484a81bae6ab6290f108ed424e6b3bb27f92f2911cbf7321559ab82baa6749d06b0c43daf8ef0002e3e274b2a
SSDEEP 384:cdIBuz3M+tn7R3Unex4oqG9srsqNfU3/YKx4At:LIRt3uF5tZUAKx4A
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

88900

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ff8964c8f5d252262d791d51888448c0_JaffaCakes118

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

ff8964c8f5d252262d791d51888448c0_JaffaCakes118

generic

out.upx

generic