fcb8b776618a58060928a6d7d7c23661_JaffaCakes118 | Triage

Sharing

General

Target

fcb8b776618a58060928a6d7d7c23661_JaffaCakes118
Size

54KB
MD5

fcb8b776618a58060928a6d7d7c23661
SHA1

5dc28359d741eaab9737ac5d78811cb575acfdda
SHA256

bd467477ec758b2a5ab5652da7f03627ef301075d833e9a4c0cba6600fba4b8b
SHA512

1dec7b1acc9e45b2adf1c8c47b10c7449af4e1f2b38be9274ee826c978a48863273f762658ee170e87fbf6dc0a9cd0f7f76fa416ef449db40ee4914946e69f13
SSDEEP

1536:KvQ4EYIIMUl+xWW2udFiJX5ELLozatWd3b6mef:KI4EYeQW2CgaLcGtW5h8

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
fcb8b776618a58060928a6d7d7c23661_JaffaCakes118
unpack001/out.upx

Files

fcb8b776618a58060928a6d7d7c23661_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE