b5b8ee1b5e96454e631f6cace25e38ff_JaffaCakes118 | Triage

Sharing

General

Target

b5b8ee1b5e96454e631f6cace25e38ff_JaffaCakes118
Size

12KB
MD5

b5b8ee1b5e96454e631f6cace25e38ff
SHA1

b398a5d14a04eec6706769d44b6b7fa0212bebbf
SHA256

147a4108052065664ff30fd18fd362bb23f81645da8baa12602e6fb26c89aa3b
SHA512

496cebc69b691f647507b6fec936daa8072e910cc85ba3895bee6215056467896a69e3a41477da323e2ee30aaf0bb470a637140ec2f380eaa44b56e598bc6ef7
SSDEEP

192:ZJs3syx1CrVyOf84YTFxOxvauuVBZ8pKBpYuE9wTS7B1Jgj:Zi8k3OkrhcxK2IYu61J2

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
b5b8ee1b5e96454e631f6cace25e38ff_JaffaCakes118
unpack001/out.upx

Files

b5b8ee1b5e96454e631f6cace25e38ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ