b75d390cc90d77c0abae06872af25f7c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b75d390cc90d77c0abae06872af25f7c_JaffaCakes118
Size

153KB
MD5

b75d390cc90d77c0abae06872af25f7c
SHA1

1c2ae9a32700cfae7dfb821270912b4e56f31a06
SHA256

482ff9ee456ecba52fa0539642001c52439e470c2086173f5651b0cff3ab0814
SHA512

a9d87b9c2cf24fcb5ba4f1722099670d77383725f28301ac0eae774ad38ef2c26eef47fa829dd4430548c7add3c4956019d8e2616691231c69fa6ca9fdbd0500
SSDEEP

3072:iDn+Hf8Yi8/0vIcX38Rg9GI3rJrs8ZMGUfaGo3p90Z/qNinBIX4mk+JblxvGNJw:SyZ27RhlUfFcP0ZSNinKomk+lPGNJw

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

b75d390cc90d77c0abae06872af25f7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5b3491ea8088fc51b83f6c336b091783

Code Sign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CloseHandle
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess

user32

MessageBoxA
MessageBoxA

advapi32

RegCloseKey

oleaut32

SysFreeString

Sections

CODE
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX1
Size: - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.UPX2
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b3491ea8088fc51b83f6c336b091783

Code Sign

Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

Sections

CODE Size: - Virtual size: 20KB

DATA Size: - Virtual size: 192B

BSS Size: - Virtual size: 5KB

.idata Size: - Virtual size: 1KB

.tls Size: - Virtual size: 8B

.rdata Size: - Virtual size: 24B

.UPX0 Size: - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 53KB

.UPX1 Size: - Virtual size: 47KB

.UPX2 Size: 147KB - Virtual size: 146KB

.reloc Size: 512B - Virtual size: 216B

CODE
Size: - Virtual size: 20KB

DATA
Size: - Virtual size: 192B

BSS
Size: - Virtual size: 5KB

.idata
Size: - Virtual size: 1KB

.tls
Size: - Virtual size: 8B

.rdata
Size: - Virtual size: 24B

.UPX0
Size: - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 53KB

.UPX1
Size: - Virtual size: 47KB

.UPX2
Size: 147KB - Virtual size: 146KB

.reloc
Size: 512B - Virtual size: 216B