6335f496b459eb4860adb35b8a39eb1a_JaffaCakes118

General

Target
6335f496b459eb4860adb35b8a39eb1a_JaffaCakes118
Size 187KB
Sample240722-phx4msybjm
SHA256 2cac7d325af11bcb6d0a0d6dc3fdc31a48e0d7b46d1c9b6c44701dac0edf54c1
MD5 6335f496b459eb4860adb35b8a39eb1a
SHA1 ed5d70d6e8073c826c2bd2ae53d2dddca48604fd
SHA512 80ba3ea583abfffb4714c423ea7795eca0c325a85d93cbee08db5ff9e78a91289f45cb3f37f71903d56aa20c7f649aba0db88b2d3890c69bce1fb2daa4db7a81
SSDEEP 3072:jyz1L02FCDTyOwJ+ReqajQwBKRS05fJdxR67at2kdEbOt0WIX1pQK0P:+9j8SOBSBBKY051R/tV+bOEg
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
6335f496b459eb4860adb35b8a39eb1a_JaffaCakes118
unpack001/out.upx

File Explorer

6335f496b459eb4860adb35b8a39eb1a_JaffaCakes118

.exe 187KB
out.upx

.exe 197KB

6335f496b459eb4860adb35b8a39eb1a_JaffaCakes118

SHA256 2cac7d325af11bcb6d0a0d6dc3fdc31a48e0d7b46d1c9b6c44701dac0edf54c1
MD5 6335f496b459eb4860adb35b8a39eb1a
SHA1 ed5d70d6e8073c826c2bd2ae53d2dddca48604fd
SHA512 80ba3ea583abfffb4714c423ea7795eca0c325a85d93cbee08db5ff9e78a91289f45cb3f37f71903d56aa20c7f649aba0db88b2d3890c69bce1fb2daa4db7a81
SSDEEP 3072:jyz1L02FCDTyOwJ+ReqajQwBKRS05fJdxR67at2kdEbOt0WIX1pQK0P:+9j8SOBSBBKY051R/tV+bOEg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

217408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 33a19988ee50d90da66f5397c2c5aa9d9c282837282ec5dbdd47a4e182256a98
MD5 103123c1421632226dd64ff4b939c603
SHA1 3cc554ddd0f5de0fd0228c459141a1d8248dbd8f
SHA512 11bab3f0c4c37dce8c7caa7a477c897699335cdc185d7c1e72f789f4095bfbc709a2cdcf1391b5e4245a7178d0af26f0c7cff5b4a60eebee56a1cdede394629d
SSDEEP 3072:U+9tv0Qn95DgjOCo2YW6PLImPaYYaH1b3UdbUmaPsP:9v0E5Y6jFEQ1jUa0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

140600

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

6335f496b459eb4860adb35b8a39eb1a_JaffaCakes118

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

6335f496b459eb4860adb35b8a39eb1a_JaffaCakes118

generic

out.upx

generic