47bc952251e543924cf893d28f1c9054_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47bc952251e543924cf893d28f1c9054_JaffaCakes118
Size

84KB
MD5

47bc952251e543924cf893d28f1c9054
SHA1

1d640fdea62bdc0557bddda7a8ad589f692d6795
SHA256

1abfc591eadaf296dd3cb68412eada72c5e8839e35dd41fb3aa1c1cf5082b53d
SHA512

6c5e30cda9217845bdf3c3a1a561210c0afca240474e49318c6ba0af2e20e5145bdb6173733baa27ddf2bb962d190eee954b86a9b0162c87865c2d3baab82315
SSDEEP

1536:mr8qQSLEYWuRx8gjhK2hGMM4RSQwwEakhRZqk4IZhNXgVOK/wdYhPoUcvZLuYtDE:mAZSLEeHDjhKZwVgRZH4IbNX0OMhPyv

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
47bc952251e543924cf893d28f1c9054_JaffaCakes118
unpack001/out.upx

Files

47bc952251e543924cf893d28f1c9054_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 76KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ