46bacd503ce10adab3b881e47c85ac5b_JaffaCakes118 | Triage

Sharing

General

Target

46bacd503ce10adab3b881e47c85ac5b_JaffaCakes118
Size

10KB
MD5

46bacd503ce10adab3b881e47c85ac5b
SHA1

c40a7b5f5de226b6c31036ed47e607be3c5cd98e
SHA256

0fe80df7db7ecd20e127399e6f733ce0e01051f6d7bc17d64a7120c8181fbdf4
SHA512

073a1824d8b971ca8803e9ac04f1ad32593b0ddef18b242cf68c499f471e21600c1935d32f8dfc5be66c6ff06f4df38afc3013da8a63770d37140f63c2b84193
SSDEEP

192:SPEo6tQMKS6vpJrlOF+y7lF04/UXu/M1qOUgkOd9I2uRh7yNO:Sh6tQMKS6FHy7la4/UXPqzgkOd9k5

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
46bacd503ce10adab3b881e47c85ac5b_JaffaCakes118
unpack001/out.upx

Files

46bacd503ce10adab3b881e47c85ac5b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE