42c6de93c633c305b94e6e5a5d4a07ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42c6de93c633c305b94e6e5a5d4a07ce_JaffaCakes118
Size

119KB
MD5

42c6de93c633c305b94e6e5a5d4a07ce
SHA1

a4e897a2c3d9691e4a5ad316b120ab5289962212
SHA256

5110b3a5e0690ec9400b8743e9ee989100b94d9b86c0c54213942adc65b1db5c
SHA512

e0b29374eece59fdf83d825cb48fe55bfd5efce4073fa06a9d4809330a52692bf6e8c23d8177a29adb034fabd12fff049db4a9c4d66fdd68a99cdaa0dc90e79b
SSDEEP

3072:9EOfmmkyOphGSHomtg/RAvU+Z9fblCltFlsUZdnIHWZs7TWPx:9E+cpJHoSg6RdblMDZ9IHk

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
42c6de93c633c305b94e6e5a5d4a07ce_JaffaCakes118
unpack001/out.upx

Files

42c6de93c633c305b94e6e5a5d4a07ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 208KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ