74dece0a7ee783af6c7fc97b51f9d360_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74dece0a7ee783af6c7fc97b51f9d360_JaffaCakes118
Size

22KB
MD5

74dece0a7ee783af6c7fc97b51f9d360
SHA1

b14187d268d09a1805c4bd2f2df288d5e107bf2a
SHA256

8f13f6e819ff125530d7d4b8b99150173e56fcea6660487ac92071b8f0b0ef42
SHA512

ab07ef7c0934374e888193cb9d321ee3371a35f4e21060eb4fb371589c531573f97c5f736d7c7f96312af58c24d5f06c7ccdce53141fb6a405d8da255f78a33e
SSDEEP

384:RwV9aeSXj6nezDNPP1yZeyAW+K01r3ipTj7z9eu8nPpPyQQI:mjZC6ezhX05+Zro7RePnoQQ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
74dece0a7ee783af6c7fc97b51f9d360_JaffaCakes118
unpack001/out.upx

Files

74dece0a7ee783af6c7fc97b51f9d360_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 277B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE