1bbc45715b5eaca0fe89e39fb24a06f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bbc45715b5eaca0fe89e39fb24a06f7_JaffaCakes118
Size

392KB
MD5

1bbc45715b5eaca0fe89e39fb24a06f7
SHA1

a422bd92f2892ae0cbbfa61b8a4658adc73ca851
SHA256

dc86e9deb77fa680936a9f35dfbcc407b22eb06712498e9da20a3dbfd98fcab3
SHA512

eea10b428cd3c4180b94d54841a615865303c738bed47df8a878a2b55462ee120be38f2fb26ae5317a8c309aa9b1565fedd1214380fabe250f4e820599fa84dd
SSDEEP

6144:aCp1ASOGGOUZUn76o3EFAWdJtAcTjAdnUmXwKHJE6VlfTUoFfH2KU44IHXOmA:7p1AzjT6nO5FBdJmkjsnbVtVNU1I3Om

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
1bbc45715b5eaca0fe89e39fb24a06f7_JaffaCakes118
unpack001/out.upx

Files

1bbc45715b5eaca0fe89e39fb24a06f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 390KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 272KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE