69f24b5f11b1d061bce514f88d0330cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69f24b5f11b1d061bce514f88d0330cb_JaffaCakes118
Size

406KB
MD5

69f24b5f11b1d061bce514f88d0330cb
SHA1

eac08cca8066190c858112cd8897ede67366013b
SHA256

f995893f1d7bfc7845a29c77f6b47ed06d867fdcbe1d56e33fdb4328b5ba5315
SHA512

74299a4560df08cb4383f01346187e61a2efa0adcc5c87c5647edbf321a8fd5fd7e7e99acab8155703493f4e05d4902cbf98f4719a00a71e0297d2b8b0dc45fa
SSDEEP

12288:oKWWCzzmzIFFDPnLa9dIkMFw+cVWJom5lj:fWWC+oibRMFkVW

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
69f24b5f11b1d061bce514f88d0330cb_JaffaCakes118
unpack001/out.upx

Files

69f24b5f11b1d061bce514f88d0330cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 620KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 385KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 972KB - Virtual size: 968KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ