ad4aae83d8e79b55d1290e2fcd09427a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad4aae83d8e79b55d1290e2fcd09427a_JaffaCakes118
Size

4.7MB
MD5

ad4aae83d8e79b55d1290e2fcd09427a
SHA1

6a6c6cbba139be5f42dd1c8ef7bb3e6fe2761695
SHA256

cf8056590f8c0c5831d105807b9e6cd52417d9a641bd37ff823b289870ea7bc4
SHA512

82540761c85c55676fc9c1425af77cfebf433f9a41e6814f1e1ddfb2b02f4715273b79a5da438fc8161c2fae1558444ca1d1141dd051f1fe7fe3c28181d26741
SSDEEP

98304:k6fGDob8tzn4W5AWY6AgUcGPLLLBDoD6iA/wSV8bypJNW:k6fGY8tMW50gUhVT8GpbW

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
ad4aae83d8e79b55d1290e2fcd09427a_JaffaCakes118
unpack001/out.upx

Files

ad4aae83d8e79b55d1290e2fcd09427a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 291KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 268KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ