3a094f4ee038413036c3c5d10f95aec1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a094f4ee038413036c3c5d10f95aec1_JaffaCakes118
Size

73KB
MD5

3a094f4ee038413036c3c5d10f95aec1
SHA1

2904e27f3fba529c9849e5a7b6898454bd136b57
SHA256

e625c99016fb085ab3a78f3009aa1ed0491dd7069eed283c506dc56ef1ed513e
SHA512

4c949cfc553d9ab4e5b554dbf7ed3e3bc35c098e157de097d509e20b145c419deb73d1355c662bc54edfac409bd92e99b9ef3ac1d2945728c19f4896b6f577ab
SSDEEP

1536:QE/xtsndmNXe0ko1RzAj3n2EUdR+qXflivE9oI2UzT4RTWt+kp6:tDsnsdED2DR+qv8aAe4Ryhg

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
3a094f4ee038413036c3c5d10f95aec1_JaffaCakes118
unpack001/out.upx

Files

3a094f4ee038413036c3c5d10f95aec1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ