9fd386ac3429d424725b9e2a85890d60_JaffaCakes118 | Triage

Sharing

General

Target

9fd386ac3429d424725b9e2a85890d60_JaffaCakes118
Size

74KB
MD5

9fd386ac3429d424725b9e2a85890d60
SHA1

dc8d5f13de3bdc69f1e3a4bb638d4424bbfe4bf0
SHA256

bd542a270246a10a188736458edf75cf2b3b32064af0e3a51192e79f5b4049c8
SHA512

9647101df379c98240197d240330b3fd1b6775f940bd4d7c58b1c130a9b5b224199c657d46093e57c7a7eacc14e02327eedc2dd06dd4b0a51caeb54501bad9b3
SSDEEP

1536:WBYH+mjBbLD3ZqFJKOopr2oksYgc/1qlLwoeqZ5BxMktt/H:Y4bpYJKOoqHIlI8ek/

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
9fd386ac3429d424725b9e2a85890d60_JaffaCakes118
unpack001/out.upx

Files

9fd386ac3429d424725b9e2a85890d60_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ