83cbec24b0c979826bce3ab552b23568_JaffaCakes118 | Triage

Sharing

General

Target

83cbec24b0c979826bce3ab552b23568_JaffaCakes118
Size

1.6MB
MD5

83cbec24b0c979826bce3ab552b23568
SHA1

9f5f98402bf38c94c8e079c84f7338ffb5eb1c38
SHA256

1a7b7e1a36e2b490a756ccd3832e3c684005a851ab0d516f3df85a7edccf6f1d
SHA512

be8d864f1c641cde35156997d91e8d30769ec60e7bb543b8e54560219980ef6e1137f4fe77bf7c061a410c50c76b318e88326615447881a6cd7157a06d29baef
SSDEEP

24576:VOMtvJYOAcdfd8zmKCF9LhF1HPEzwa0iWFhPDoc5wqVCh0TyWSddnrRhQPFy:VOmxYXcdfZjLhFB84hUH2C+VSrnrRh

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
83cbec24b0c979826bce3ab552b23568_JaffaCakes118
unpack001/out.upx

Files

83cbec24b0c979826bce3ab552b23568_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 4.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 632KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ