692962ff018f469d038a544ffef9a92f_JaffaCakes118 | Triage

Sharing

General

Target

692962ff018f469d038a544ffef9a92f_JaffaCakes118
Size

84KB
MD5

692962ff018f469d038a544ffef9a92f
SHA1

b34f64fe2ed0fc2ce4fc3c916f9e93206e9fd3b7
SHA256

2cfb53636f3f2dc662f5f2d0b8b75af18180e825ce623e30db0dfeb0a030f609
SHA512

5ce424b6ed67cc1c52bd331a9cffa4ecf54afe9e99144cc973d621d94d64299d08e508a68fb9eecd8f3d29f56d04648dec90a8a0d815ec6becb6fe00837fce87
SSDEEP

1536:Imrh2TwFjHl3GKd3Xo4eskbgMFs/FkczTmrjNnUS1xwe0dgcfF:VGwFjFWUX7pMFIk8TmrjNIeegY

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
692962ff018f469d038a544ffef9a92f_JaffaCakes118
unpack001/out.upx

Files

692962ff018f469d038a544ffef9a92f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ