a0fa5a330617b3ff7224ad7cab66aace_JaffaCakes118 | Triage

Sharing

General

Target

a0fa5a330617b3ff7224ad7cab66aace_JaffaCakes118
Size

195KB
MD5

a0fa5a330617b3ff7224ad7cab66aace
SHA1

957b7ee8bc4082c9ca1fe858a7cc9d1fc002726e
SHA256

7fa131247e6f0cb9684d76b732ae1a0fbdf29f88a980423d7600817451bc1b69
SHA512

b4689541cab36a436ba338dc3f060693dc464ba766bd5d4c647e8bd2a5cd29416f6844ca9829b7bf8ed8040ad5d794abcf22757323ba64f1c729d7a36ed95ecb
SSDEEP

3072:KSyg+UT6MZCu18H/RxaBibP7iL+v/X+p9zQMrMjfBFi8kwG7YtcO:X360CrfTogTiqv/a9zQKMbBFi8kwGEi

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
a0fa5a330617b3ff7224ad7cab66aace_JaffaCakes118
unpack001/out.upx

Files

a0fa5a330617b3ff7224ad7cab66aace_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 185KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ