d47efebba698b204112c17f54e65d5b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d47efebba698b204112c17f54e65d5b7_JaffaCakes118
Size

83KB
MD5

d47efebba698b204112c17f54e65d5b7
SHA1

4278ffd954ad7eff51cbdce04c94c9ddffb0d8f5
SHA256

58e97bc73907e6f94eb6fc014b7cc21b9f09d6710557941dcde6d86e624651da
SHA512

bfc8d4577f05e36a7eca4c17ccfa3d64628e73ba511806a45db1a84a011b250a72cfedfb5d75288e0f33d1a8fdd868e64764498c1ebb382ef8d5ca43989fc46a
SSDEEP

1536:fHb5YqQ87mqpNDNvoh6xQsHrgpJXNn4XhzX1YKsIGy2OENkS5xHcieLO7J3JWPSt:/NYqQ8Kqp5NvoZsHrEJp4ReBQ2OENvsC

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
d47efebba698b204112c17f54e65d5b7_JaffaCakes118
unpack001/out.upx

Files

d47efebba698b204112c17f54e65d5b7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ