7776b80f27854de6cd10ae45fded4c96_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7776b80f27854de6cd10ae45fded4c96_JaffaCakes118
Size

310KB
MD5

7776b80f27854de6cd10ae45fded4c96
SHA1

994b55e0650375ca2e77ac04c537b6adbde626cb
SHA256

219e8bc3630cf70c4e178f943db68c0f1cca908fd3ef4f66f56d6ebf70c79b86
SHA512

110436e8ba3fb9f1f79223a495af616922afeb4ed2c6e06609c36fa1f796dbaacb3f33eaac3de7f2d2d802729370da703eb0ae63e856bb9e9a4c7c51baac3a72
SSDEEP

6144:2PrjXsVNBGgagQJNX6c7nRvL+xcjfJzmU38/+++++++++++++:2ProVNBG2QuovLBfUUs

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
7776b80f27854de6cd10ae45fded4c96_JaffaCakes118
unpack001/out.upx

Files

7776b80f27854de6cd10ae45fded4c96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 456KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 140KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 416KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ