70418f4659c115f2504b8547193e260b_JaffaCakes118 | Triage

Sharing

General

Target

70418f4659c115f2504b8547193e260b_JaffaCakes118
Size

92KB
MD5

70418f4659c115f2504b8547193e260b
SHA1

e2ef2ff5ff0891ab7868ca65b93704c369c858ad
SHA256

ab89036c17e4ecde9c4baff5d95601d4c2c321c2dd5042138e1318e5576ffe3f
SHA512

07d1a2cb637a28768c7ed40f2cbba75ceaf0b8af0786204286d33643c0ded7f81e33e24b1dce925e2749fd22c5cd45ba5cca94c371142158e4d6b9758bbbefdc
SSDEEP

1536:XSV+6aGXNFKLSANFxFe1xB6XkYneNQ6GiPMDj9SEQaXt7ji4zT5BP1:XSVxHOL/NbI7YXkYnIQ6GiE3MElt7hzN

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
70418f4659c115f2504b8547193e260b_JaffaCakes118
unpack001/out.upx

Files

70418f4659c115f2504b8547193e260b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 216KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 288KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ