c02f9bd78d5795ecae750518e88713f6_JaffaCakes118 | Triage

Sharing

General

Target

c02f9bd78d5795ecae750518e88713f6_JaffaCakes118
Size

198KB
MD5

c02f9bd78d5795ecae750518e88713f6
SHA1

c0d211df3453195c88dc0e77eb4e19ab85b7f3a6
SHA256

0d92e1c4af5ce6886b580b8459a1c5b896ee6607d1681c83270210fb4c679c66
SHA512

58dbfba4503b823050278449aed32bc2e6594ccacec7c21ff76554783d626a36c231d6c262e35704a00eb8d3f20566fb2e2098517f4ecb4e10cfc09a49078443
SSDEEP

6144:bHUaCgi/+Stj7d+fLGzIgbIdnWVTSNjfg:jvFi2Sl7d+LGzNbwnWKjfg

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
c02f9bd78d5795ecae750518e88713f6_JaffaCakes118
unpack001/out.upx

Files

c02f9bd78d5795ecae750518e88713f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 189KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ