839a9f304241431c7cdb8ca8e03e4fb5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

839a9f304241431c7cdb8ca8e03e4fb5_JaffaCakes118
Size

18KB
MD5

839a9f304241431c7cdb8ca8e03e4fb5
SHA1

1bcefa88a0a1302845bf376d5d3249f956032b22
SHA256

13d5cd7261c74e85aa8573c44a01d1aed97d325262f8b4743b962fae980adc09
SHA512

22c1d401ed7290471aaf85cde5ab5cebd51ac8f9f7d941aec6a8ff2c37da6056d0203ee2945b80ad60457045e34b2b390f10c78278d6b91291dce03ea4a314ce
SSDEEP

384:oWkYP/824t+ea3LND9E+Jslg3AbKmLhNmp3YN/Dh5DEHZTQNHFhT:oaPj4traQ+JWqyKmLZ5V5DEHiNHX

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/2Flyer_Screensaver_Builder_PRO_v5.0.2_keygen.exe	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2Flyer_Screensaver_Builder_PRO_v5.0.2_keygen.exe
unpack002/out.upx

Files

839a9f304241431c7cdb8ca8e03e4fb5_JaffaCakes118
.zip
2Flyer_Screensaver_Builder_PRO_v5.0.2_keygen.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
FHCF.nfo
File_Id.diz
keygen.nfo