707742459e2bf5877ad91904c100d1d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

707742459e2bf5877ad91904c100d1d7_JaffaCakes118
Size

38KB
MD5

707742459e2bf5877ad91904c100d1d7
SHA1

58bc7cff447cf735337a6a80137f028490d227a9
SHA256

946cdad63c96e79f6ebd96531b4ce6647b4566e85905bb78824669c1e6c3ca2e
SHA512

ccd2367958fe866265f8bee587e8ce25b5e0eb0f7e40dc601e640bcbbd15cb47eb125fddf15bd77ed96a4e53db81fc84760521f1b7dc14de12a0e0a9d675efa7
SSDEEP

768:Vyxu4hNBvQQ07U40iv6ovKUYuzAam3Wr2b:VAugY7UEv6KKUTc1GK

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
707742459e2bf5877ad91904c100d1d7_JaffaCakes118
unpack001/out.upx

Files

707742459e2bf5877ad91904c100d1d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ