0f6f8e23c4164c66c884b3b14103c2b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f6f8e23c4164c66c884b3b14103c2b5_JaffaCakes118
Size

192KB
MD5

0f6f8e23c4164c66c884b3b14103c2b5
SHA1

6f5b0d0271a28de9b411cc48abd25a4120285578
SHA256

7f05316f1a9dacefd26125e834789698a616f362ddce1f95a055679be7c4a164
SHA512

732a0d9847a6b36440246149212924ec2d73f810fa382b869abeb2474848736a771a5e7dfac1f68a4d984d0fedfad97bfd91673e0f420ccc4d841c0302b608d4
SSDEEP

3072:gK5oIEzCBuPZ2OM5d/kmP47ScBQYUOUBCOEgFo9H14aauXRT+0ObiGE8qFo3qmfI:VRBuPZ6dME6iBnEEop14r0O+GYTXE

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
0f6f8e23c4164c66c884b3b14103c2b5_JaffaCakes118
unpack001/out.upx

Files

0f6f8e23c4164c66c884b3b14103c2b5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 183KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ