05d525cb7549787d8c468be2f82a089d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05d525cb7549787d8c468be2f82a089d_JaffaCakes118
Size

187KB
MD5

05d525cb7549787d8c468be2f82a089d
SHA1

4a1b3b10ca349715cf1bc1c2d279c30903fed815
SHA256

e95587070aae1a34212abdb83d4be203b8630f81d41d1e11d8a15b450252d507
SHA512

4fff143fa36e20335ea2d632c1fbbbab3c73b6293624c280b35369682ca4a16ae142ca1eeb58d58c796eb6a932625c736676661cb9a2e770e70ab46ba31dc71e
SSDEEP

3072:xMavMpcxGfKpRZLteNfA3Y8O09tSGkTudWBOLHeHoIMmwrLuEBy:xKmG2wleY8OSDUud9aHGy

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05d525cb7549787d8c468be2f82a089d_JaffaCakes118

Files

05d525cb7549787d8c468be2f82a089d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 328KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 143KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

..
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc/0/version.txt
.rsrc/1033/GROUP_ICON/103
.rsrc/1033/ICON/1.ico
.rsrc/1033/ICON/10.ico
.rsrc/1033/ICON/11.ico
.rsrc/1033/ICON/2.ico
.rsrc/1033/ICON/3.ico
.rsrc/1033/ICON/4.ico
.rsrc/1033/ICON/5.ico
.rsrc/1033/ICON/6.ico
.rsrc/1033/ICON/7
.png
.rsrc/1033/ICON/8.ico
.rsrc/1033/ICON/9.ico
.rsrc/1033/MANIFEST/1
.xml
UPX1
_