a04e4bc82524703bc05488829a105a54_JaffaCakes118 | Triage

Sharing

General

Target

a04e4bc82524703bc05488829a105a54_JaffaCakes118
Size

205KB
MD5

a04e4bc82524703bc05488829a105a54
SHA1

e84ba02200441778ae6bae91a9bdc325242ad5fb
SHA256

2f4607fb75cce50d2d87f8ce51159bad506c539e81e44775ed0689f2e45d2f7f
SHA512

844a344a40719f5436df6bbf4c77134be6ec350345eec1a67c511f612b0d58496d65c52e0cf95377db5349a19d1f966488cb5c0c8aeb03a9e5b2718f997254d4
SSDEEP

6144:aLqKYdH3AbpbgrTmSUk/s8dIwvedQgxpgj:+qKqXAbpcrh/s9+oDyj

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
a04e4bc82524703bc05488829a105a54_JaffaCakes118
unpack001/out.upx

Files

a04e4bc82524703bc05488829a105a54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 197KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ