ef155846fbfa834d598389b6ed3c17dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef155846fbfa834d598389b6ed3c17dc_JaffaCakes118
Size

20KB
MD5

ef155846fbfa834d598389b6ed3c17dc
SHA1

6565d804f1760927fbb09bd7f69887f8b4372286
SHA256

49936dbb0f8f88c5e80d359a1d328add2e19bba593f84b3f64ca98c31696d9b7
SHA512

3cb3c0e60a9a9ee64239729845cabfcfe2781e3385c074ed9edc9a4ae92e7e55aa339670b4d3363d68ad375d7cfe5ac26dcabca3e6150ff5ce7be6d7c7213206
SSDEEP

384:yZ6f6A7cTH/Qrzjh77ItA/oTIYfFt7U7+xn:yZ6YTfWnhvuA/GDfF5Uq

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
ef155846fbfa834d598389b6ed3c17dc_JaffaCakes118
unpack001/out.upx

Files

ef155846fbfa834d598389b6ed3c17dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ