5ff5d787031b75281be00345b250ef38_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ff5d787031b75281be00345b250ef38_JaffaCakes118
Size

64KB
MD5

5ff5d787031b75281be00345b250ef38
SHA1

40f12efc51a4344e170f99f7981d7c596008f02f
SHA256

f8b1e44ea02d8df2deb80ae70daa8d9b0e52746c672ffeae87e83f7f75f6a662
SHA512

e2fd9d39520d62769dac07229cd2c57b6212c4466fdb198ac64a8347d06b4a87f182f28ecdf87d595a550c203a016e3159b2d2ab2e524ae8577828d44efef07c
SSDEEP

1536:aFdh1wpAN4Lp6zWh3yggT1toVX5h1/TO+cHhq6KICyGi/9XfO:aFf1VgNMoPLcqzyGi/9Xf

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
5ff5d787031b75281be00345b250ef38_JaffaCakes118
unpack001/out.upx

Files

5ff5d787031b75281be00345b250ef38_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ