0323c8e8249f1584d63d59b06596ff87_JaffaCakes118 | Triage

Sharing

General

Target

0323c8e8249f1584d63d59b06596ff87_JaffaCakes118
Size

562KB
MD5

0323c8e8249f1584d63d59b06596ff87
SHA1

ab389aa753bd6173081a7fdc92f35f1ad0c60a2a
SHA256

94f4f5dbd4aa51bf76439da8df26812b69425380e935290b51e2212488d0df66
SHA512

1a3c276e1cb5b43d0dda7223787edc0a4c28e8564da20ea1371dab89762b3b730000f24f43e7e3f254060ff8ba102f02ef771f7e287ed769d431c92ba3e69051
SSDEEP

12288:2vlsT6mYXYzYXcZtC1SCOGO1omJ1aa97pfxyuK+i3O:2TCMXuthC1jc1a05AuL

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
0323c8e8249f1584d63d59b06596ff87_JaffaCakes118
unpack001/out.upx

Files

0323c8e8249f1584d63d59b06596ff87_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 960KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 530KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 272KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ