090ced17d01a4495d1da622a81896e8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

090ced17d01a4495d1da622a81896e8f_JaffaCakes118
Size

98KB
MD5

090ced17d01a4495d1da622a81896e8f
SHA1

0d401cadd70695f86f5feca2350db945c290ffc7
SHA256

a88898c6d27229e8113f01609d9fa1ce41566237b770fa197a7c4a22b1e8fcbc
SHA512

81bae3d7bb7cb4dcd457fbf925934a6130d8fb497d71060014090f75eb5cb131770080d410c5f3835057aa62c16c8d7db7e4c20c6b2c2bf9d3994b79cf4b323e
SSDEEP

3072:A73MjuuJx46OqHXSF2i92sRx1Fx1VQmxGefZ:A7fdq3SFtTxSmZ

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
090ced17d01a4495d1da622a81896e8f_JaffaCakes118
unpack001/out.upx

Files

090ced17d01a4495d1da622a81896e8f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ