a7f3ad9ab88b7bd46deb580c68be5684_JaffaCakes118

General

Target
a7f3ad9ab88b7bd46deb580c68be5684_JaffaCakes118
Size 146KB
Sample240614-eqel6avbnf
SHA256 6dd36fdd69a2ad5e22431afa7f758fc48e69869f74942823c1186407c4983262
MD5 a7f3ad9ab88b7bd46deb580c68be5684
SHA1 da9f7b5f99bac21109b383d95d1786e68b68dfb5
SHA512 0b3b3b914eb2d78730dee7f11e6424da43291606cbd2141594ab6da1c7466c3cab47314286445af3b0fc74384fae7b28960eae4fd28afb579b60ae65a072f302
SSDEEP 3072:hdN8TaIh3ftQjr3uI7y/gc6S5if5lfImNyctWGKsr7ERJ2+rA:hdsJyjr3hyobS50ffjNV/xrQz2+rA
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
a7f3ad9ab88b7bd46deb580c68be5684_JaffaCakes118
unpack001/out.upx

File Explorer

a7f3ad9ab88b7bd46deb580c68be5684_JaffaCakes118

.exe 146KB
out.upx

.exe 238KB

a7f3ad9ab88b7bd46deb580c68be5684_JaffaCakes118

SHA256 6dd36fdd69a2ad5e22431afa7f758fc48e69869f74942823c1186407c4983262
MD5 a7f3ad9ab88b7bd46deb580c68be5684
SHA1 da9f7b5f99bac21109b383d95d1786e68b68dfb5
SHA512 0b3b3b914eb2d78730dee7f11e6424da43291606cbd2141594ab6da1c7466c3cab47314286445af3b0fc74384fae7b28960eae4fd28afb579b60ae65a072f302
SSDEEP 3072:hdN8TaIh3ftQjr3uI7y/gc6S5if5lfImNyctWGKsr7ERJ2+rA:hdsJyjr3hyobS50ffjNV/xrQz2+rA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

336320

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 bd0e301f762fe913b0f858dd864ac4f092716fa1f669b47adcae437201bc5730
MD5 a160f1f9af8e4f175e71a8f8f83eb32c
SHA1 c9f93742833218645519c8527e0701fcfb86ce2a
SHA512 c4c5925f25dba9e2cf82d10a48a36c5ba64e65b86c4a596d146c6a276fd0ca6e2e5875c45da2538e0a1fefe140b5b2b3c052817f09a01661977b8143a7194b3d
SSDEEP 3072:EW1HZ4f5lfImNyctWGKsr7ERJ2+rJwv6nCmagX+z:E25+ffjNV/xrQz2+ruv6nd9X+z
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

19489

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

a7f3ad9ab88b7bd46deb580c68be5684_JaffaCakes118

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

a7f3ad9ab88b7bd46deb580c68be5684_JaffaCakes118

generic

out.upx

generic