4412a749ae42fe61585ffb4dd46c1f94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4412a749ae42fe61585ffb4dd46c1f94_JaffaCakes118
Size

54KB
MD5

4412a749ae42fe61585ffb4dd46c1f94
SHA1

1ff260aa677e26e9464cd56c8fe0115eaf9a97b1
SHA256

9c33257b20427f9b2e571c3797b7ec8db4575fdf0a22dce55bac499135b438c5
SHA512

e2693b76985d5d9a85dd9ee29e87a45461c4301d93af84edba2ef191be09b37ebe226f1cdf5696add94946c2a57773bbf53e3b9d5cf368800abd6723b623ddef
SSDEEP

1536:SNqaLV8a6YO/SHXTI8ov2ZOriULI758uv:SNqMD33T/ZOriUL8Guv

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
4412a749ae42fe61585ffb4dd46c1f94_JaffaCakes118
unpack001/out.upx

Files

4412a749ae42fe61585ffb4dd46c1f94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ