e26df2acb4f3795f4ead6ea0db8b243b_JaffaCakes118 | Triage

Sharing

General

Target

e26df2acb4f3795f4ead6ea0db8b243b_JaffaCakes118
Size

131KB
MD5

e26df2acb4f3795f4ead6ea0db8b243b
SHA1

528a616ad71f5aad6fc6a654c7f5e6c3f2e27b6a
SHA256

2f2ffc3e7ebdf9fcca0810334ed1c61a47809bbdef57f854a86e745654d1b520
SHA512

d77c03a3dd8faa681cc8aaaac195ed35d7a24d38f387f2c59b0044479be89dc0c75254260e43ee9a9b61e8d5ff19ee754cf2e30f94bfacb54c31dfe874331cba
SSDEEP

3072:tjqJKi4pKTqBmS10i3KLqfLpnw3eaF4rN9q8MDQ:BqJJ4Qqj0iCUw3e1B9W

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
e26df2acb4f3795f4ead6ea0db8b243b_JaffaCakes118
unpack001/out.upx

Files

e26df2acb4f3795f4ead6ea0db8b243b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 122KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ