a53a5ca5cc99b05ecb95e914223839b1_JaffaCakes118 | Triage

Sharing

General

Target

a53a5ca5cc99b05ecb95e914223839b1_JaffaCakes118
Size

113KB
MD5

a53a5ca5cc99b05ecb95e914223839b1
SHA1

32311e6458c00559bd1b5c1476870178f78c9318
SHA256

726cc44080493af011442e95b9769f2d98420dba8e59226712cb7e217d34eb94
SHA512

d645f9f5018560b56963abb5ead7b359024dab1a7d97e5feacc38716a3c0da30d390cd6347bf4e31b72763e3a42fb641e01e642765cd5f53c9cc9c5aed01042c
SSDEEP

1536:GsexVPpEQryKJZFB43x3FJkf2vKWp5tp9yi9Mg9Jv5Vjem+S6CZvbFwXq:8VPpEDXx3F2fNWp3X5/XhVjeo6Cxb+

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
a53a5ca5cc99b05ecb95e914223839b1_JaffaCakes118
unpack001/out.upx

Files

a53a5ca5cc99b05ecb95e914223839b1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ