ced8aa44abccc6c2bc4eac5f21fcb2a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ced8aa44abccc6c2bc4eac5f21fcb2a4_JaffaCakes118
Size

42KB
MD5

ced8aa44abccc6c2bc4eac5f21fcb2a4
SHA1

2cf756c2eb8f5b3691461a3efb7eae59db585dad
SHA256

bfece939c91975c73939181fe3f18923b6e6fcd8d83dbb4ecaff6f57652294cd
SHA512

45eaf019620ca93e0f5fdca71ec54ce5848ad216b46529c77fc8a880844832d650a8b10850f36086ad83bf069e1b65f4ad14b4c4caacadf880cf053d57e04ec9
SSDEEP

768:BYTB+ciwYAI5UXgChN+Y/KrOv2dYKRJ1udvlbZLS7vC37Qx:BuB+JRJuBSSWY+J1unbfe

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
ced8aa44abccc6c2bc4eac5f21fcb2a4_JaffaCakes118
unpack001/out.upx

Files

ced8aa44abccc6c2bc4eac5f21fcb2a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ