dea4515b8eb5f69757bf276dd7500244_JaffaCakes118 | Triage

Sharing

General

Target

dea4515b8eb5f69757bf276dd7500244_JaffaCakes118
Size

85KB
MD5

dea4515b8eb5f69757bf276dd7500244
SHA1

ddc4d06fd81eee6f2344fd5a2412e01c699a0a6c
SHA256

9cfdc7140ec88bd29a8077f71617ce78f61672c6bf4ab444217eb39cef5ca52d
SHA512

b133d7f1f7efcbe0bdce035f39fd47695a43eb634553c35bc837a6331380738e3b676ab387da80f08b02b5e88f72bc4a0714391a8067b4dc04d790694b5a750d
SSDEEP

1536:yqM/TbhGVhzBiB4KWMqHSLNSFwihp4OtVokT36P0o70n6RfXuATJWvXWFfFE4ov0:KblGDtcWMqyywik8oc36Mo706xYmRGVc

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
dea4515b8eb5f69757bf276dd7500244_JaffaCakes118
unpack001/out.upx

Files

dea4515b8eb5f69757bf276dd7500244_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ