d67683edc5cb9c403f1a94e41b028d59_JaffaCakes118

General

Target

d67683edc5cb9c403f1a94e41b028d59_JaffaCakes118
Size

59KB
MD5

d67683edc5cb9c403f1a94e41b028d59
SHA1

0871cb3154a2b98c084996f99f6ea91f6f71881d
SHA256

f0d739326e368027573cc28fa4ae2970d5319486c244674bc7b9cdd60bf483d7
SHA512

acb4230247db3ccfde46b119ea854d979ad26eebe96d6c25a9db9bcbd5a145fc42b01fea42134a990c2774cbd6f8be6df47bcd6059b6336326da9455d6118f9e
SSDEEP

768:QsAJ6wY58hc/XuwJOgtmjawxvTd/0Zh5ZS1x+gUBU3f1twRWXeBPFsC0oMv+TZb4:8J65z2asR0FYCC3vXe3sDoZ4/PBh+

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
d67683edc5cb9c403f1a94e41b028d59_JaffaCakes118
unpack001/out.upx

Files

d67683edc5cb9c403f1a94e41b028d59_JaffaCakes118
.exe windows:8 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 356KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:8 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.reloc
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 512B - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 667B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 359KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 356KB

UPX1 Size: 56KB - Virtual size: 60KB

.rsrc Size: 2KB - Virtual size: 4KB

Headers

File Characteristics

Sections

.reloc Size: 1024B - Virtual size: 2KB

.tls Size: 1024B - Virtual size: 3KB

.text Size: 5KB - Virtual size: 4KB

.bss Size: 512B - Virtual size: 3KB

.pdata Size: 1024B - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 3KB

.text Size: 512B - Virtual size: 667B

.data Size: 359KB - Virtual size: 359KB

.text Size: 1024B - Virtual size: 3KB

.rdata Size: 512B - Virtual size: 1KB

.rsrc Size: 3KB - Virtual size: 4KB

UPX0
Size: - Virtual size: 356KB

UPX1
Size: 56KB - Virtual size: 60KB

.rsrc
Size: 2KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 2KB

.tls
Size: 1024B - Virtual size: 3KB

.text
Size: 5KB - Virtual size: 4KB

.bss
Size: 512B - Virtual size: 3KB

.pdata
Size: 1024B - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 3KB

.text
Size: 512B - Virtual size: 667B

.data
Size: 359KB - Virtual size: 359KB

.text
Size: 1024B - Virtual size: 3KB

.rdata
Size: 512B - Virtual size: 1KB

.rsrc
Size: 3KB - Virtual size: 4KB