bb6aa4f32e1d2553545b82842387746a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb6aa4f32e1d2553545b82842387746a_JaffaCakes118
Size

70KB
MD5

bb6aa4f32e1d2553545b82842387746a
SHA1

62d27d856e1fd40a2bcd27ecc7dc4fb59b0170b9
SHA256

5953b49d5d9487f2368ed1a97117eaa3b639dab0e5d18c1a14ec603979f587b1
SHA512

d08508ea2f981a1a84d644f9fbaf6630c946f7ae5862cbd92fb190e8f5f98835f24597c5e4a4940a87b3a228629d21c31e3a287acf06f82a46ae54e6f07e52e0
SSDEEP

1536:uk552VAAgDIO5eynch7MU9ql7LLBZR1J/h2vrqRajPxaAW6Q4lECJ59Z:uJAAfO8wMwyG73HR1v2vwGE4lEC5

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
bb6aa4f32e1d2553545b82842387746a_JaffaCakes118
unpack001/out.upx

Files

bb6aa4f32e1d2553545b82842387746a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ