0defb055e986dd58983c97a39fbcbdbd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0defb055e986dd58983c97a39fbcbdbd_JaffaCakes118
Size

110KB
MD5

0defb055e986dd58983c97a39fbcbdbd
SHA1

8d21087fa6454ccd1c9d12be353ceec85c90ce7c
SHA256

c8c6f6c62eca1fdb5013a3831dd514a2fcc0b26902a7050cb743c9bcb07aff11
SHA512

35b1a748b7e8e813aa20dfea89d3fbf2b6ca0acc55022f3c5cdabe5446c0ff45aa3f89ea6c7de8aae2b19e638cafa71bc511570365f429999760583329e952f8
SSDEEP

1536:GKqyEAbVs8fTGQRX9zvFI3P60tLaMni0lZ/kYq2rFxjHj5hOll3KuU:GHyEKeYTn/vFM7La6xlZ8krFxP5hqlL

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
0defb055e986dd58983c97a39fbcbdbd_JaffaCakes118
unpack001/out.upx

Files

0defb055e986dd58983c97a39fbcbdbd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ