24f69775af1ee52ffef1c35804df8d61_JaffaCakes118 | Triage

Sharing

General

Target

24f69775af1ee52ffef1c35804df8d61_JaffaCakes118
Size

447KB
MD5

24f69775af1ee52ffef1c35804df8d61
SHA1

b5cefc7ebbd6107b191dc23d9309b1133ae086ca
SHA256

fe97af4fc3547df300a76e2a94b398194e423925c02d9063dbcadd67d7e34bda
SHA512

89184042bc5409bd1a9082c2b6ac147081af71f890de6167476cc748b88225590d917304b638a885fc8a7bc2bf0ae97780976c6ea1e1d3ed76d0274e0b204728
SSDEEP

12288:AY/EMDWWGUbEEeJAwaYopVy+tGJEljAkd92jHfA:5c0WWGUYEexLoxtT6k/If

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
24f69775af1ee52ffef1c35804df8d61_JaffaCakes118
unpack001/out.upx

Files

24f69775af1ee52ffef1c35804df8d61_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 636KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 445KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ