fe5f247d470c5c4d4ef26277ff4aafe9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe5f247d470c5c4d4ef26277ff4aafe9_JaffaCakes118
Size

61KB
MD5

fe5f247d470c5c4d4ef26277ff4aafe9
SHA1

d8b26f0778b4f60c1e10295d31ad264326369bde
SHA256

47a235aa85b0945a3fd6d2ccaf799599443dadabfc228f890b253a323db32bb5
SHA512

54f051b976526d9ac99889b5a4d904f9bb71d101644f24b43d8110b4090eaf2f6f35d0b0171937bc02655322f2023ebfee16f023bb6548f790ae7238ea654cb5
SSDEEP

1536:4ezNKLICxaLdWc6GJh6WixpHpnegLIvaO/cV69dr:5zNKLICxadVJEBzB8U4r

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
fe5f247d470c5c4d4ef26277ff4aafe9_JaffaCakes118
unpack001/out.upx

Files

fe5f247d470c5c4d4ef26277ff4aafe9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ