0906672756dce01e23b0148977a25903_JaffaCakes118

General

Target
0906672756dce01e23b0148977a25903_JaffaCakes118
Size 60KB
Sample240620-xzzykaxerm
SHA256 c57cf616f9f504c2add92a3b36452c06004e9a35bff4b4c2e0e33dd1c32731dc
MD5 0906672756dce01e23b0148977a25903
SHA1 3cb09003a49ce93b1a832f8ffe5bdcec7856439b
SHA512 08dbee7e98ed44e7ef9b8fd703b40e4b1c913e60db66e1264b15b15b69f8042c252f7ebff21ce678371782779576b8f9f4278116cc486d12e6375f03de33aed0
SSDEEP 1536:Yvw1dBlhfoglsS0sjjZW3TrTWzCjedyngyWq/V:YY1HoQsJYW3TrTWzmf
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
0906672756dce01e23b0148977a25903_JaffaCakes118
unpack001/out.upx

File Explorer

0906672756dce01e23b0148977a25903_JaffaCakes118

.exe 60KB
out.upx

.exe 69KB

0906672756dce01e23b0148977a25903_JaffaCakes118

SHA256 c57cf616f9f504c2add92a3b36452c06004e9a35bff4b4c2e0e33dd1c32731dc
MD5 0906672756dce01e23b0148977a25903
SHA1 3cb09003a49ce93b1a832f8ffe5bdcec7856439b
SHA512 08dbee7e98ed44e7ef9b8fd703b40e4b1c913e60db66e1264b15b15b69f8042c252f7ebff21ce678371782779576b8f9f4278116cc486d12e6375f03de33aed0
SSDEEP 1536:Yvw1dBlhfoglsS0sjjZW3TrTWzCjedyngyWq/V:YY1HoQsJYW3TrTWzmf
MD5 SHA1 SHA512 SSDEEP

windows:9 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

3

Major OS version

9

Entry point

381040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 57b329eee92123309e7aae2bf489efe134648743a26294a02534b4da39436bb9
MD5 18554397fa75781903c3b2d8fe0a1505
SHA1 77f74c2521b55ae4545acf253126e450d72414ae
SHA512 3004be70a5c63dff7950c9f077b2069cbfd1ee24861b9abd053029b0eb939fe0456b84923e5821a5717eee5cd27e5d09a94089f88c7058e2d02b6708d488560d
SSDEEP 1536:NQK/uY4ng1i84gxPNX6ixPFtzK9eGbxX9LmkQ6V3:2quY4ngs87PR6iPtzRGbxX9SkQ6
MD5 SHA1 SHA512 SSDEEP

windows:9 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

3

Major OS version

9

Entry point

55052

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

0906672756dce01e23b0148977a25903_JaffaCakes118

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

0906672756dce01e23b0148977a25903_JaffaCakes118

generic

out.upx

generic