432060c6b986d357b0328b074740530a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

432060c6b986d357b0328b074740530a_JaffaCakes118
Size

9KB
MD5

432060c6b986d357b0328b074740530a
SHA1

b449cca1181411ed8402ae472595783e35d4b651
SHA256

11e9257a865a25b6f34741be383cc967567ba34d6918b848314e8d8f418e420d
SHA512

c88710615f4a8a1e187f517026aa7908465cbd51d6b26d3c2e60aac73498cfdff08fce3377eb0b3a397c3a6ac34ce94f306712656bf7902e3c249a74e42673cb
SSDEEP

192:ldkJy8mCK65uAMwZfCzQVu26tDvQ0f89i9+z+iet9GNIxTE98TghVz8:iJmCKiuAMwlOWl6VQ689KS+ltINIx49e

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
432060c6b986d357b0328b074740530a_JaffaCakes118
unpack001/out.upx

Files

432060c6b986d357b0328b074740530a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ