64f94f9006cd1ea267df58d6fbae8eba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64f94f9006cd1ea267df58d6fbae8eba_JaffaCakes118
Size

82KB
MD5

64f94f9006cd1ea267df58d6fbae8eba
SHA1

d5405402bb96aa73a0a14d14b47a1d253d31dc6e
SHA256

19ee9a4356aa58add2040e215c2e896f09a6459ea515b06e6c242e31f07aa15f
SHA512

03c4d3b3bb9d8cdc91fab6a142b20c71c69e364678da60df210a5bec8391e95d30d80ff085730a78436798c0506ae26ffe8eb69caab4ad6d2f6619223f7fa36f
SSDEEP

1536:JpDp+za6IeQBaL3KRtW9G40aaURpEdGCIQFdVVQn:JuvL6+440aaURpEdCOO

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/Intervideo.WinDVD.Platinum.5.x.keygen.exe	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Intervideo.WinDVD.Platinum.5.x.keygen.exe
unpack002/out.upx

Files

64f94f9006cd1ea267df58d6fbae8eba_JaffaCakes118
.zip
Intervideo.WinDVD.Platinum.5.x.keygen.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LastSource03.nfo
file_id.diz
fss.nfo