35191317eed30666896cf6e1072cb946_JaffaCakes118

General

Target

35191317eed30666896cf6e1072cb946_JaffaCakes118
Size

340KB
MD5

35191317eed30666896cf6e1072cb946
SHA1

241a6e76ecd080011757586b395702604b336b6b
SHA256

c44986350dbb8136cdccd66c34f278f64fc780cb343d828be79325104432fbd0
SHA512

a1dbc0f8fa51437970ade7317ab05934d860c1ee15c846f3ec4489ef61173edc23fc00876405c58a3a3e44810a7629d20ed77ef1ae754d069ea4f65ec3ed0a2c
SSDEEP

6144:Xpa9dIiyiRQNYkE8I07xIL3imA3ttm/EUDWlfrThKn8Q3TBd7+11x/F0f3KNpX3q:X2a1YSI3L3iVjmIlTTQn8QjBR+Tx/F0J

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
35191317eed30666896cf6e1072cb946_JaffaCakes118
unpack001/out.upx

NSIS installer 1 IoCs

installer

resource	yara_rule
static1/unpack001/out.upx	nsis_installer_2

Files

35191317eed30666896cf6e1072cb946_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 308KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 331KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 275KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 308KB

UPX1 Size: 331KB - Virtual size: 332KB

.rsrc Size: 5KB - Virtual size: 8KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 229KB - Virtual size: 228KB

.rdata Size: 55KB - Virtual size: 55KB

.data Size: 11KB - Virtual size: 26KB

.rsrc Size: 275KB - Virtual size: 274KB

.reloc Size: 34KB - Virtual size: 33KB

UPX0
Size: - Virtual size: 308KB

UPX1
Size: 331KB - Virtual size: 332KB

.rsrc
Size: 5KB - Virtual size: 8KB

.text
Size: 229KB - Virtual size: 228KB

.rdata
Size: 55KB - Virtual size: 55KB

.data
Size: 11KB - Virtual size: 26KB

.rsrc
Size: 275KB - Virtual size: 274KB

.reloc
Size: 34KB - Virtual size: 33KB