7060b854cfea004f9e47b5e7700af408_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7060b854cfea004f9e47b5e7700af408_JaffaCakes118
Size

88KB
MD5

7060b854cfea004f9e47b5e7700af408
SHA1

64d5a7037d792ae9b21f409a8c503ad12cb74c3a
SHA256

3346b44f49be3598d28e08367065fcd90f0d1107157d8a17cfa58abc2a999693
SHA512

5eab03c371a403a18b02605935302ec24b48cb4f987cd123fb8244ae8daa6da9d52d419f891d8879c31207d8cdc4414071e456d85b1f02b933794ec240aec584
SSDEEP

1536:Y8PnqLfXtJ+ylB3hVasbH80PhhoOeejuiMEgocAX2ulQ6Hbe693omvi:tqh8y1Vzc0joYEuDl51oT

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
7060b854cfea004f9e47b5e7700af408_JaffaCakes118
unpack001/out.upx

Files

7060b854cfea004f9e47b5e7700af408_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ