af4a3da6ea53f2d2372a0a3b62d353c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af4a3da6ea53f2d2372a0a3b62d353c3_JaffaCakes118
Size

84KB
MD5

af4a3da6ea53f2d2372a0a3b62d353c3
SHA1

6e9ffc1bf22e5d66a4ef52dc4e0000681605cd44
SHA256

48d41d2fc8c3cafdee3d73ddbe2692ea97bd4df7987684936d37a640095b5ada
SHA512

8b27c4e939f9c12cd1ac80b00460c23409b844c96af57aaf3a314450459cd182c51414d6a800f7cb6e2038974570f3110ca3ac97fac2fc53467c5032a614285d
SSDEEP

1536:9bCVMfQ+Et5IAqS6/9JkbURiZX3dIJhEfyxpLuXTszLPYWCU7x1rIrngX+w:92Vo4QS6PkOONYhEybqoz0MnUrId

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
af4a3da6ea53f2d2372a0a3b62d353c3_JaffaCakes118
unpack001/out.upx

Files

af4a3da6ea53f2d2372a0a3b62d353c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ