86afe47859e80b1a08815368b163043a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86afe47859e80b1a08815368b163043a_JaffaCakes118
Size

40KB
MD5

86afe47859e80b1a08815368b163043a
SHA1

cb4b881cb99c9285225feeb3e8b58419b88002f4
SHA256

fd796b759f1ac44b86b61ba52aa57c12037a4d1aeba5700e0a9dcee52187a713
SHA512

33ffc0b59677420351940214afc87ded236490b7f8a5b321f650d188d02ef08cb98e3bb11dbddc0ed4c3c369f09eac8e3a9b2117193fa51184c658f9a2224ffd
SSDEEP

768:4Z9PNCqJjqxxI4zKx2PFk6dyqukgLR8E2N/bmFEHAdc661g:CP5mxLeck6Ha8E2N/bmFE661g

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
86afe47859e80b1a08815368b163043a_JaffaCakes118
unpack001/out.upx

Files

86afe47859e80b1a08815368b163043a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ