da7d0cf0888bda60f57d078588c07a5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da7d0cf0888bda60f57d078588c07a5f_JaffaCakes118
Size

13KB
MD5

da7d0cf0888bda60f57d078588c07a5f
SHA1

dc31128a8f3d989fe6e2c263cc11e5ae871d459e
SHA256

efcff85ae3b58f681e523ad74ad80b6ef65d2b1d25194049042797b08a204fd0
SHA512

50caff3ea7692c3355b2954e4d65ab7a2f71c3d34deb9f32fd4fb390385f30af4b0bed03dcdd8835258575337869ad9cbc1226d16f4eb6607762e84873c1cb39
SSDEEP

192:kSiFQmb0N9WrpiTBvwQLUG6x15DB8fdfO8SXwJJc4fknLVG:SCm4TOWoQIG6ZB83m0kLVG

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
da7d0cf0888bda60f57d078588c07a5f_JaffaCakes118
unpack001/out.upx

Files

da7d0cf0888bda60f57d078588c07a5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ