23aef18282f952cbca94ba59ec828e5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23aef18282f952cbca94ba59ec828e5b_JaffaCakes118
Size

218KB
MD5

23aef18282f952cbca94ba59ec828e5b
SHA1

690b405a7cec78b5d6a9ae29f707a555639ca411
SHA256

a7d1783b057cace26c430aae63cb45ead413843c7d3c8e2cf9cd9f9f8856a066
SHA512

cd46ece472b413edd945a5108c08f3e7e913bba991f3b15270e9ab251029a48c8c2c59b004828a357a95a5a18339c43a5f09cd1621661422474fb6a367fb9179
SSDEEP

3072:j3WrVgQDLf4cO2TOOmGH7PF9jNhOq7dqHbOgskw5qn1FeCDj6XWFRO0kzvGWjZD8:yriWLfvKO1RbhOcT75qPLGXwHyvGK

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
23aef18282f952cbca94ba59ec828e5b_JaffaCakes118
unpack001/out.upx

Files

23aef18282f952cbca94ba59ec828e5b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 207KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ