05a7bf748339e5b1f1a34fc25e28d14b_JaffaCakes118 | Triage

Sharing

General

Target

05a7bf748339e5b1f1a34fc25e28d14b_JaffaCakes118
Size

556KB
MD5

05a7bf748339e5b1f1a34fc25e28d14b
SHA1

59c18435b2a9f26dd3b224e31a494955e5c6b573
SHA256

06dd62d0f98c71f6e72b9a02ffd50df180287afe873adec4237004dd5e5f1918
SHA512

c86b673cd19b68c3c7802c38450cb31ee621a08d0067a5b22322b9f5280c8e131cb4b24513065206e1a602bfa708e3c15a74e4b5002225b6bad662a55dd263fe
SSDEEP

12288:ShuXL+hWRPdHbOCYlLALynynzw/S95Ay9HKJkq9j2wLvMM56:SMQ85bOXuyUaU5Ay9qJXVvvMM56

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

Files

05a7bf748339e5b1f1a34fc25e28d14b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Code Sign

2b:ca:6b:fd:ab:7e:56:37:ba:8e:7e:9c:64:00:cc:75
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

02-02-2011 00:00

Not After

02-02-2012 23:59

Subject

CN=Install Core,O=Install Core,POSTALCODE=62919,STREET=Nisim Aloni 21,L=Tel Aviv,ST=Tel Aviv,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

48:06:91:fd:dd:85:42:03:fa:a0:f4:56:a6:f9:29:6b:25:88:62:5c
Signer

Actual PE Digest

48:06:91:fd:dd:85:42:03:fa:a0:f4:56:a6:f9:29:6b:25:88:62:5c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 580KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 521KB - Virtual size: 524KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE