01ad21e2de25783ad45d36de11ad77c4_JaffaCakes118 | Triage

Sharing

General

Target

01ad21e2de25783ad45d36de11ad77c4_JaffaCakes118
Size

35KB
MD5

01ad21e2de25783ad45d36de11ad77c4
SHA1

d0c17495145caec83c5f5355c700e2bf1b2c7972
SHA256

e2bda05eb452fdd3bc14ee8d32ff468b3d044b351bd1b5a41b78ed0b71e99989
SHA512

4212be2cc9b079cb2c3d7e458b0ff50aed27778df7279d40d0fe8c35cab44ed0849edd7ad27a4a890e5c1e5e3c7d9f76f274439acb72664d597bd2b8995e6cd1
SSDEEP

768:21bk40SsnYeEQox+kunDljzRn+Uya0hsu4SDJpj7pPfuna1q:21kPSsndE2NJ1+UyHhpxDJFd1q

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
01ad21e2de25783ad45d36de11ad77c4_JaffaCakes118
unpack001/out.upx

Files

01ad21e2de25783ad45d36de11ad77c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ