19df7bc952ae07553dbd2dd704345574_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19df7bc952ae07553dbd2dd704345574_JaffaCakes118
Size

91KB
MD5

19df7bc952ae07553dbd2dd704345574
SHA1

7c4b6dda0a977962873a203ee22037b029b52280
SHA256

1d8a4bf0216c6a1e3e6bb6bd0dd868f3ec5c95145b37faaa8295f30240c82c88
SHA512

49f7681be152a538930701a4653a87a029b12690c8ebb245c2c7eba0e5e587b09e66ca6aa8b307cc40a8a42ee0b81221cf79508de55ca6b05caf6c214060d37e
SSDEEP

1536:m6W/aQkJZ7WrCnDnJYnbJ+JwGwAO1LGwD0zkKC+9gugEpL7Lr+k/8kZ3:/QkJcwDJSbJ+JfUvKy+9gugEpXh/dZ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
19df7bc952ae07553dbd2dd704345574_JaffaCakes118
unpack001/out.upx

Files

19df7bc952ae07553dbd2dd704345574_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ