71c62ab7bf6dfc97f252dfa26be25d90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71c62ab7bf6dfc97f252dfa26be25d90_JaffaCakes118
Size

61KB
MD5

71c62ab7bf6dfc97f252dfa26be25d90
SHA1

b4f1300df0f659262a8daaea2996d0e5d49cab68
SHA256

b3778ddff51a8d3405a2737e46e17195a2b56f0c649349c3266968e2696d0ce0
SHA512

afee73f69f464a941dca38019498be9bceca0c3237a2a8179f20e206d536c38b161667e58df676cf442c8303837c1c97fcacd442161021cd9ce6d2d4fef1f5c0
SSDEEP

1536:hMsZWDgBgeh6TL5J4HwL4CZRKGmHu6NVG3Y:usc5eh6TdJ4QL4gR25VX

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
71c62ab7bf6dfc97f252dfa26be25d90_JaffaCakes118
unpack001/out.upx

Files

71c62ab7bf6dfc97f252dfa26be25d90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 196KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 220KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ