da14b041d1489d966e670dc4c5b03e1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da14b041d1489d966e670dc4c5b03e1a_JaffaCakes118
Size

27KB
MD5

da14b041d1489d966e670dc4c5b03e1a
SHA1

2b02f672936907289e10ddaec4e3f3fcbcfea926
SHA256

5810e84420fb051f3737de0ac4680fcf9fb87d7816b8d740a2e54637367d0c14
SHA512

06ebc6d873b49e7f2f0d2261b9f9c64c1ba8184efe342ab2a6704a406bb3c8751578ec3d3ef3c5ab56f1cc32b8af2060bbf0722471b94b2006c25327eb17083a
SSDEEP

384:6HXyTrLFV3WTuMCUcridy8o/VIZ6Xp7mL0o+zStjvocBbtwo/Or6+S9Pfu7n5:66rLFVjMCTWdye8Z7mj7gAwo/hdeV

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da14b041d1489d966e670dc4c5b03e1a_JaffaCakes118

Files

da14b041d1489d966e670dc4c5b03e1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 121B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 22KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ