2ce4e15c46b41d74e039a8f8e8a560cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ce4e15c46b41d74e039a8f8e8a560cf_JaffaCakes118
Size

27KB
MD5

2ce4e15c46b41d74e039a8f8e8a560cf
SHA1

69a5fe052c12382e90064eee2e3b092acbac7589
SHA256

e613b8fa2ee2d60064435c5ff62d6a217ecdf501868d6bc1d56e81cdf33e3426
SHA512

e6cd11ba94b6b98253decde196d47323547819b071387ccc3d3447bc7f45d74268e81b532d97db101a3545a6ddaeb159562716a71b103631c7b35369de70e7b1
SSDEEP

768:LfxU+rc0cot8ZxZ/V8sc8cg7GVZnyU9kUGZAFV3ssW:zxrrc68ZxZ/V8y7iZr2hZAFk

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
2ce4e15c46b41d74e039a8f8e8a560cf_JaffaCakes118
unpack001/out.upx

Files

2ce4e15c46b41d74e039a8f8e8a560cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ