42678227617ef534fd431bd889a5844f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42678227617ef534fd431bd889a5844f_JaffaCakes118
Size

106KB
MD5

42678227617ef534fd431bd889a5844f
SHA1

fd75047ac6e87de948cf1bd4f33a6568ec013d0b
SHA256

922c40f7a3074cb7449932392e1ba08e23288b83b141f2b44a7549680e857257
SHA512

f77abf3d009cf571b06788264b47d8ed1ee0cb39375883039cfe3a6fb80a1cbe9e87b4ddfb0fd7115a683408a0fae11dbb44bf4898f29ca8689e87df63383fcb
SSDEEP

3072:HzpB90AwLIOM4lT63ybS4tYqT9eMEJjBSwk:lAA74h6yS4tfgJQv

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
42678227617ef534fd431bd889a5844f_JaffaCakes118
unpack001/out.upx

Files

42678227617ef534fd431bd889a5844f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ