283fd0dca2fed086770d2a0a5e47bdc3_JaffaCakes118

General

Target

283fd0dca2fed086770d2a0a5e47bdc3_JaffaCakes118
Size

31KB
MD5

283fd0dca2fed086770d2a0a5e47bdc3
SHA1

92eacf36bcef2bf1bb221cbc8a7676bbe0b18af3
SHA256

3f5ca62732287776344801c5eb1289a668f14c38fc3da68ab9f6889d0d9e486d
SHA512

d6e0602304c20f8ffa2cf1f7914731d78e484d87b55a477fc293de38ef2887725b3961bb40a4205a51cae9d6f60d51da8a64d956d132bdf5960c52dcc7ed2b6e
SSDEEP

192:KugjMUwuxC+ppKrm9isTrQXmKJrmdcwby1FSWIhEVeL/6LZhgx2B77sd+4KG:MYUwuk4U0jKUByOAe76dmYqdJn

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
283fd0dca2fed086770d2a0a5e47bdc3_JaffaCakes118

Files

283fd0dca2fed086770d2a0a5e47bdc3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58fdd4832572f5508cf0ba221ed80adb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
CompareStringA
GetProcAddress
GetModuleHandleA
lstrlenA
GetLastError
GetCurrentProcess
GetTickCount
Process32Next
Process32First
CreateToolhelp32Snapshot
Sleep
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
ExitProcess
WinExec
GetModuleFileNameA
GetEnvironmentVariableA
GetTempPathA
GetWindowsDirectoryA
GetSystemDirectoryA
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceA
CreateMutexA
SetLocalTime
GetLocalTime
LoadLibraryA
CopyFileA
DeleteFileA
CreateThread
GetCommandLineA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

msvcrt

strrchr

user32

wsprintfA
DispatchMessageA
TranslateMessage
PeekMessageA
SetCursorPos
GetWindowRect
FindWindowExA
SetActiveWindow
SetForegroundWindow
FindWindowA
SendMessageA

Sections

UPX0
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

58fdd4832572f5508cf0ba221ed80adb

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

user32

Sections

UPX0 Size: 28KB - Virtual size: 28KB

.rsrc Size: 512B - Virtual size: 4KB

.avc Size: 1KB - Virtual size: 4KB

UPX0
Size: 28KB - Virtual size: 28KB

.rsrc
Size: 512B - Virtual size: 4KB

.avc
Size: 1KB - Virtual size: 4KB