d65e9a95ad793649856d039d4ea54352_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d65e9a95ad793649856d039d4ea54352_JaffaCakes118
Size

431KB
MD5

d65e9a95ad793649856d039d4ea54352
SHA1

0649504812e4d2eff86f606df48abe527c98fbd2
SHA256

c8187b8f9244ba1b9f45341ccbc56523bf159cfea6e00addfeef9d1b07eb26b9
SHA512

eb483f56bb7b9538428a57e5731ac03e2c852156d4a8416cc5001667023842a76dbe63ab91f56d644f65daabc58649968f65af1ee62de9fecd3864a3831f4353
SSDEEP

3072:xvnBaaWA8T54xhvKXTxpP2I+MBknvchl70GY6GPp1gZ9rE50OxbaL1d5mB:xvncXDKhKX9cQknvcwn1Ua5hbaLp8

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d65e9a95ad793649856d039d4ea54352_JaffaCakes118

Files

d65e9a95ad793649856d039d4ea54352_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yvs
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc/GROUP_ICON/103
.rsrc/ICON/1.ico
.rsrc/ICON/2.ico
.rsrc/ICON/3.ico
.rsrc/ICON/4.ico
.rsrc/ICON/5.ico
.rsrc/ICON/6.ico
.rsrc/ICON/7.ico
.rsrc/ICON/8.ico
.rsrc/MANIFEST/1
.xml
.yvs
UPX0
UPX1
[0]