62b122af6cb683ba505a0ffb73ea50c7_JaffaCakes118

General

Target
62b122af6cb683ba505a0ffb73ea50c7_JaffaCakes118
Size 192KB
Sample240722-lfmncazdqd
SHA256 25a9b054db1182c08aa34d9149b21e58435889e4235f95c9e795d46b537b6591
MD5 62b122af6cb683ba505a0ffb73ea50c7
SHA1 013ac3b31f5dffb60891fc1ce394e6cee40cf940
SHA512 87c8a5a96ad34b963b323bc667f2df4c825d193489bef6823f653411382a3cf89968541ebfe1acd468e0cab28ea7ebb725f5eff757d88c8d198204acc5f9b674
SSDEEP 3072:11Z+VbLaXPFgIaUMm293UiXBZvOd2Y1ZqWBj3Bn19coumP9qZYJJzLXw9jcWex1p:v2ui9HnW11ZpBj3pcol+Y3XTWejC
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
62b122af6cb683ba505a0ffb73ea50c7_JaffaCakes118
unpack001/out.upx

File Explorer

62b122af6cb683ba505a0ffb73ea50c7_JaffaCakes118

.exe 192KB
out.upx

.exe 203KB

62b122af6cb683ba505a0ffb73ea50c7_JaffaCakes118

SHA256 25a9b054db1182c08aa34d9149b21e58435889e4235f95c9e795d46b537b6591
MD5 62b122af6cb683ba505a0ffb73ea50c7
SHA1 013ac3b31f5dffb60891fc1ce394e6cee40cf940
SHA512 87c8a5a96ad34b963b323bc667f2df4c825d193489bef6823f653411382a3cf89968541ebfe1acd468e0cab28ea7ebb725f5eff757d88c8d198204acc5f9b674
SSDEEP 3072:11Z+VbLaXPFgIaUMm293UiXBZvOd2Y1ZqWBj3Bn19coumP9qZYJJzLXw9jcWex1p:v2ui9HnW11ZpBj3pcol+Y3XTWejC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

223024

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 bb36e6ad2d5241146d65da054a59bd1f5a67484f7166a787c9931a845622674a
MD5 a2a42986c3f257dcbfe6eb6b79f84f6f
SHA1 54a29e3bb1afae10e85dcbe280a794436279fcca
SHA512 506d71ea3c746b023522c037b971b089e661a65103bc6e8822ab5dcef8e9a9de551855dd7f1f5bf57b7773e31cdb42321430fee3b299323b9526e383bd5c4ec5
SSDEEP 6144:GKNdIxMHjjn+DI4mE9+5JJaLd+/YIObejC:GKNuNd9CJYg/fjC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

145404

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

62b122af6cb683ba505a0ffb73ea50c7_JaffaCakes118

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

62b122af6cb683ba505a0ffb73ea50c7_JaffaCakes118

generic

out.upx

generic