6374daa20a3c6eb253a2b14a76510c06_JaffaCakes118 | Triage

Sharing

General

Target

6374daa20a3c6eb253a2b14a76510c06_JaffaCakes118
Size

918KB
MD5

6374daa20a3c6eb253a2b14a76510c06
SHA1

cc853d739f01b6a4658dd04e23136ab7b8a914b2
SHA256

5b49d8d6a695162d5419ff7c4fb66b675cc3639898516237d7e84040790324bc
SHA512

41f89aa74d27ca8a83de14bfe30c04bdd6e1b8954c5ce12fed107cf8facb8a24db2c6cb2ada00d15e2decc1edc69848ef9aa239ca2b70c9418ba1df25aa67128
SSDEEP

24576:NE8NZMC425ttdFvG2TiLqPTCgJuGpwKkvefRqlcXduCZS7Tskji:NxjXdFu0CgJBpXkvefq2uwS7

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
6374daa20a3c6eb253a2b14a76510c06_JaffaCakes118
unpack001/out.upx

Files

6374daa20a3c6eb253a2b14a76510c06_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 4.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 913KB - Virtual size: 916KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ