cfe5d7d5b215ea5f1dce70c4958d60fa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfe5d7d5b215ea5f1dce70c4958d60fa_JaffaCakes118
Size

18KB
MD5

cfe5d7d5b215ea5f1dce70c4958d60fa
SHA1

28a0a837d35a09da7c03642dba8434d1c5b979a3
SHA256

6b82e0cef26672e9eeee1bcdd3e40c6190e480a82d3c70c7f4e0baa81108c19b
SHA512

dc894c7694ac387a9942cc5261ec432af4c1a2fcc9cce3c48233eed3694270aca49df4c2ecb4571bc885f14f837469876b10270ef113fff894500822cc16a1e6
SSDEEP

384:z7HTOJyaASFQXlgTut4xviGX0VL4t5TuFDpX2HNYfE3KHF3:zky0MlgTQ4xPX0p42nqNmE3sF3

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

cfe5d7d5b215ea5f1dce70c4958d60fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Code Sign

0f:05:05:ae:8b:e9:b8:bd:4e:fc:a0:60:c8:94:3d:2a
Certificate

Issuer

CN=1,1.2.840.113549.1.9.1=#130131,0.0=#130131

Not Before

31/12/2007, 16:00

Not After

31/12/2107, 16:00

Subject

CN=1,1.2.840.113549.1.9.1=#130131,0.0=#130131

c1:eb:05:eb:0d:df:4a:73:93:ea:c5:da:9b:d3:be:3f:f5:47:30:7c
Signer

Actual PE Digest

c1:eb:05:eb:0d:df:4a:73:93:ea:c5:da:9b:d3:be:3f:f5:47:30:7c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.UPX1
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.UPX1
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE