228ac8323abff9ac23816e8c54c50bf5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

228ac8323abff9ac23816e8c54c50bf5_JaffaCakes118
Size

664KB
MD5

228ac8323abff9ac23816e8c54c50bf5
SHA1

557b88e659ba041ae00ff491e7c650be3304e5df
SHA256

2168feaeb39dcca52a496569a24f346407733524e52ed45344e395702b1a653c
SHA512

37ce2d909c6f870579dc18f1f0d8578be6acce2bb8728aae228be060dfd58cf3817076959f9287b32719e0e61762416e61c66132053f9456edb42a966ed900be
SSDEEP

12288:0bDqEkMs4q48IAeP0PifTEurPbvdqJplapLWTICNIYPKMTWN4t4OAUw91zRwIMfT:0Xbs48LeP0P8E6dclWLi26KGOqMwIML

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

228ac8323abff9ac23816e8c54c50bf5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Code Sign

07
Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

08:03:0f:4f:59:5e:d0
Certificate

Issuer

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

02/07/2014, 13:47

Not After

02/07/2015, 13:47

Subject

CN=Digital Plugin SL,O=Digital Plugin SL,L=GUIA DE ISORA,C=ES

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

54:a4:57:62:c0:ea:78:ed:b8:34:f9:c5:0d:1b:23:87:a6:63:cb:22
Signer

Actual PE Digest

54:a4:57:62:c0:ea:78:ed:b8:34:f9:c5:0d:1b:23:87:a6:63:cb:22

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 623KB - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

07Certificate

Key Usages

08:03:0f:4f:59:5e:d0Certificate

Extended Key Usages

Key Usages

54:a4:57:62:c0:ea:78:ed:b8:34:f9:c5:0d:1b:23:87:a6:63:cb:22Signer

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 1.1MB

UPX1 Size: 623KB - Virtual size: 624KB

.rsrc Size: 36KB - Virtual size: 36KB

07
Certificate

08:03:0f:4f:59:5e:d0
Certificate

54:a4:57:62:c0:ea:78:ed:b8:34:f9:c5:0d:1b:23:87:a6:63:cb:22
Signer

UPX0
Size: - Virtual size: 1.1MB

UPX1
Size: 623KB - Virtual size: 624KB

.rsrc
Size: 36KB - Virtual size: 36KB