881b851f81bee2503346bc6afc93d9c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

881b851f81bee2503346bc6afc93d9c4_JaffaCakes118
Size

82KB
MD5

881b851f81bee2503346bc6afc93d9c4
SHA1

2fc305f6e0e1bec7018c90dd54c20f7dcf9b27c9
SHA256

4184fdc9c9e3081b90008c30c69d770c70f589e35ba68ed2ad96d5b25cfccda6
SHA512

da6e08640d874d290326b4c6f556ac8db15985dabfbb2aff89e440d5ced7fa00422866fa0ae0779ccbdc07eca32e1440f0c3c3104f8f08315b2970a90624b2fc
SSDEEP

1536:g67Rvn32ivg81vZPQiThj+C8rYdjOJuzMZm51niCHYD29J:JRv32Ag8JZIKhj+CyYdjOJ1ZC1iSYD2r

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
881b851f81bee2503346bc6afc93d9c4_JaffaCakes118
unpack001/out.upx

Files

881b851f81bee2503346bc6afc93d9c4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ