84372bd2ba26da30fdac375f4074a740_JaffaCakes118 | Triage

Sharing

General

Target

84372bd2ba26da30fdac375f4074a740_JaffaCakes118
Size

71KB
MD5

84372bd2ba26da30fdac375f4074a740
SHA1

492a6230459a07bba26465e8af2e3c6c00abeff6
SHA256

761a238fb64c710d4b752abc6ab4ab5b1cc6f8fd8d64e0e96f8b5858db501b6b
SHA512

4a49d361d4563a41f994162ce28790fd3faf6919f592f3109c43a0b215ad3c6e5f9fb9be48bfeade092e27c5ba04abefc67d301922626e2e516e6a454053017d
SSDEEP

1536:a5l3PS/i4XixQJXJAu63+ZGhDYkQtWLEcLHfw2YYlnLOX:WqZSx0XJRA5YJW1zfJrO

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
84372bd2ba26da30fdac375f4074a740_JaffaCakes118
unpack001/out.upx

Files

84372bd2ba26da30fdac375f4074a740_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ