331bc55c272dc2109dd20e5e6b31e73a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

331bc55c272dc2109dd20e5e6b31e73a_JaffaCakes118
Size

79KB
MD5

331bc55c272dc2109dd20e5e6b31e73a
SHA1

1e00e81c984bf9f506f67846ff268f6fc0224a1d
SHA256

90df76a3565b5c6a4b92fbd7a3aed49280c9ddcb46dbbf48e5f5ec5e632e05ef
SHA512

fd1a87d6e07dc0b92f5b884aa7d3ba760cc158932c3885dfb9de6351700580bf73d37c3dfb5b8d9786089d80c1e13de4ad10fcce99f8269505c9ab8c225da9ff
SSDEEP

1536:al2dUoy4F/zskRAZA0847FF5JOzoV91MZ64MCnXqV:q2zy4F/zsBNX2zcG84z

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
331bc55c272dc2109dd20e5e6b31e73a_JaffaCakes118
unpack001/out.upx

Files

331bc55c272dc2109dd20e5e6b31e73a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ