96b7fedeef1fa4b1ded7f79515780731_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96b7fedeef1fa4b1ded7f79515780731_JaffaCakes118
Size

73KB
MD5

96b7fedeef1fa4b1ded7f79515780731
SHA1

4dca6df6af48b548edcdedb77141c36ecf6e83d9
SHA256

01a423f059dbed2beb847cf60acb7bb574732411ce94ff538cb20ba5d1d2f3af
SHA512

c4c0862aef5f27cd7a58d80c19373cd5acd5a6a7e02209b3ddbdb803213609b82c4638a0dcd4296625dcf47bf8d23d6a7c9d2a9ecc0aff34e3638ff6501a9105
SSDEEP

1536:SptRYRQH1Gk1RJRDqPNGUMcrbmY/ksGu4Wrc2oj8:GHXkwUZFcsZVc7j8

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
96b7fedeef1fa4b1ded7f79515780731_JaffaCakes118
unpack001/out.upx

Files

96b7fedeef1fa4b1ded7f79515780731_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ