171b3267345f1fba8330166c72c33472_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

171b3267345f1fba8330166c72c33472_JaffaCakes118
Size

80KB
MD5

171b3267345f1fba8330166c72c33472
SHA1

165a1ef52586b258f979b151ab1b21aefa8d9079
SHA256

d057fea3226dffcf88bf50ce67d90dbdc0b6359cd7245cebdc72de567f6aa2c9
SHA512

3acf20fab288d9ad0c42769b9f7f2ddd765c6c611424e7205908d4fe526ac6a46d68020d22fb4b449a167eb918160ee7e5d8b98581fc14c87df4efb00202f1d2
SSDEEP

1536:pt4DkZ5OQFTSSurGd66JOOM1iaZKCWT7zdW8zQx8MyUPXE1QTvYrT:pZEGtDJOOM1iMWXQWnU/E1ik

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
171b3267345f1fba8330166c72c33472_JaffaCakes118
unpack001/out.upx

Files

171b3267345f1fba8330166c72c33472_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ