a2c342a3c7cd5f99649c919f85520349_JaffaCakes118 | Triage

Sharing

General

Target

a2c342a3c7cd5f99649c919f85520349_JaffaCakes118
Size

19KB
MD5

a2c342a3c7cd5f99649c919f85520349
SHA1

5d807062c879efaf5fff3b94a43432b88641656a
SHA256

83d83a164729291cd2c52760020e5a09581a4647edfd13b415ac5de2012bf63d
SHA512

6f294668e724c8cab91389792355dacce2941242419251f68b226793f0d147c3b72160726784aebc1142231f8f4fc5bd25dc9ce25a856c923d7e1bd2a6ac962e
SSDEEP

384:eJ6rZ7aV7FNp9PxZInfyvqYPZviUVWNeQoxJOxNRw8quC:S6rU77zInKfPp5Q0JOBRC

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
a2c342a3c7cd5f99649c919f85520349_JaffaCakes118
unpack001/out.upx

Files

a2c342a3c7cd5f99649c919f85520349_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ