458376bac7afc676bb40dfd4d1e9df7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

458376bac7afc676bb40dfd4d1e9df7e_JaffaCakes118
Size

8KB
MD5

458376bac7afc676bb40dfd4d1e9df7e
SHA1

36628641ccd3f2ca569d2ef16405ffceb338b6e4
SHA256

5f2e221691f9c558161f9d83406bd069c490a38d57127b9cf301da4793047424
SHA512

5b849dda72110a642e82dc2cd622cdee9deeb020a25293114cdbed9a8265ca4e30ae9e7fdfc876fd2febd83db883c2c9f9fe1ce08f0f075c427507a081ade50b
SSDEEP

192:RFw6xL/QnNgba5eD968dhJa21Sf4+rm7Zampo:DQNgba5eI8VbSrqpo

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
458376bac7afc676bb40dfd4d1e9df7e_JaffaCakes118
unpack001/out.upx

Files

458376bac7afc676bb40dfd4d1e9df7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ