44c67f021439355ebbdd414918e1c71f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44c67f021439355ebbdd414918e1c71f_JaffaCakes118
Size

20KB
MD5

44c67f021439355ebbdd414918e1c71f
SHA1

232dd0e7b6d0ae552880f21fd3efc3a9555066c1
SHA256

1a46b94534468b0362d3346eb334ece2a66388fc04ef9e9acd548fea9ad52e02
SHA512

e40a63c3fc6aad9e3666d9f90c7ec3c8eafed53331fc76f4cbf6d340d0a7a2aed6f4fc71390e98934c448c23a99066527884bfb3440afabd2bb0133702552eb3
SSDEEP

384:SnBvv/9KRMGOI5HWcrqRKKydCgGQaZq8ZgzfkGBfORCQhA23D:SBvXGMoBdrqAKyFGQGYCf73

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
44c67f021439355ebbdd414918e1c71f_JaffaCakes118
unpack001/out.upx

Files

44c67f021439355ebbdd414918e1c71f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ