a1fb75d12199c1f08a65d8035a6eb6c2_JaffaCakes118

General

Target

a1fb75d12199c1f08a65d8035a6eb6c2_JaffaCakes118
Size

571KB
MD5

a1fb75d12199c1f08a65d8035a6eb6c2
SHA1

c80c3ad813cea631530989c78f4e9f5bda0459d0
SHA256

2bb58d08ac5ab96184b0709914ff62b8afadf1732b4d85b40aff98329bb01c9d
SHA512

b41c559cce96ada06503fcba0b7b35882129c4768d039750a49db10e4b343b6c3d6b9ea486c02f44b42210a73729f15a65917669cb5750b4d41384a302e6d07a
SSDEEP

12288:Ri+AGynjtUh2n8WYDImHKYu20V2012o3iR5RBndqikF0wPq0Aj:RiO+jtu28VDI8K20V112o4RzZwPXAj

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
a1fb75d12199c1f08a65d8035a6eb6c2_JaffaCakes118
unpack001/out.upx

Files

a1fb75d12199c1f08a65d8035a6eb6c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 576KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 537KB - Virtual size: 540KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 773KB - Virtual size: 773KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 576KB

UPX1 Size: 537KB - Virtual size: 540KB

.rsrc Size: 26KB - Virtual size: 28KB

Headers

File Characteristics

Sections

CODE Size: 773KB - Virtual size: 773KB

DATA Size: 20KB - Virtual size: 19KB

BSS Size: - Virtual size: 15KB

.idata Size: 12KB - Virtual size: 12KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 44KB - Virtual size: 43KB

.rsrc Size: 221KB - Virtual size: 221KB

UPX0
Size: - Virtual size: 576KB

UPX1
Size: 537KB - Virtual size: 540KB

.rsrc
Size: 26KB - Virtual size: 28KB

CODE
Size: 773KB - Virtual size: 773KB

DATA
Size: 20KB - Virtual size: 19KB

BSS
Size: - Virtual size: 15KB

.idata
Size: 12KB - Virtual size: 12KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 44KB - Virtual size: 43KB

.rsrc
Size: 221KB - Virtual size: 221KB