1a6b321341534418bfdbec11bf897b02_JaffaCakes118 | Triage

Sharing

General

Target

1a6b321341534418bfdbec11bf897b02_JaffaCakes118
Size

48KB
MD5

1a6b321341534418bfdbec11bf897b02
SHA1

379412d31c4504d269d1b340bd2014e71a844b7c
SHA256

c3796cbad87467e2a9159af446834a7a0cc897bfd83662c22a89e9ffcde560ef
SHA512

f8aa2c76b54b2e20db44c320b76cb6d4ab3930a0f38c1ae0306c58ed653ba72252c76619b5b57e257c0fc2348f796679c92a059d4bc9e4d9ed4d601e34bb5a8f
SSDEEP

768:QvaqteV+mGO1t97Iwby0Yvan64LtnOVODpMylX0t/BIUx1YR3iEDr6:QvBeayCwO0Yva6g1AhCX0tuwOR3Ln6

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
1a6b321341534418bfdbec11bf897b02_JaffaCakes118
unpack001/out.upx

Files

1a6b321341534418bfdbec11bf897b02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ