0442bc154af075638a8eccacc1bff231_JaffaCakes118

General

Target

0442bc154af075638a8eccacc1bff231_JaffaCakes118
Size

47KB
MD5

0442bc154af075638a8eccacc1bff231
SHA1

57ff3d732cbd169c4932b632f1712d953118531e
SHA256

ca63ae2a3b321e48b2b1ff2f67dd845781c4ebbefef94f72a6c29097024877f4
SHA512

ab544c367f978b2fe1544823fcdd664a3bba364499cd2bf51c909396482edda5f21eb14061bbd9cff4e869c11cf7c12a9e1e1be6a4b9833b70fac8928f6e2bf3
SSDEEP

768:78lpe4aizFztTeTjjEPPlVZZcvtqsDP2wevb7lV4rVDnwDbTfzSOA/Kts27qlw6U:ye4aApT+jjEcvtqsD8RV4rVb4bTfmOAy

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
0442bc154af075638a8eccacc1bff231_JaffaCakes118
unpack001/out.upx

Files

0442bc154af075638a8eccacc1bff231_JaffaCakes118
.exe windows:7 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:7 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 68KB

UPX1 Size: 33KB - Virtual size: 36KB

.rsrc Size: 12KB - Virtual size: 16KB

Headers

File Characteristics

Sections

.text Size: - Virtual size: 2KB

.text Size: 512B - Virtual size: 3KB

.text Size: 32KB - Virtual size: 32KB

.rdata Size: 9KB - Virtual size: 8KB

.text Size: 1024B - Virtual size: 1KB

.data Size: 7KB - Virtual size: 7KB

.rsrc Size: 23KB - Virtual size: 24KB

UPX0
Size: - Virtual size: 68KB

UPX1
Size: 33KB - Virtual size: 36KB

.rsrc
Size: 12KB - Virtual size: 16KB

.text
Size: - Virtual size: 2KB

.text
Size: 512B - Virtual size: 3KB

.text
Size: 32KB - Virtual size: 32KB

.rdata
Size: 9KB - Virtual size: 8KB

.text
Size: 1024B - Virtual size: 1KB

.data
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 23KB - Virtual size: 24KB