0b210e51737d0dd3c70e20e2e05853bf_JaffaCakes118 | Triage

Sharing

General

Target

0b210e51737d0dd3c70e20e2e05853bf_JaffaCakes118
Size

223KB
MD5

0b210e51737d0dd3c70e20e2e05853bf
SHA1

b43293520d6c06e4a0d47ae23bc34db42de38fa1
SHA256

b4a836eb567ccd30722539607c607370d465741e702eec172b5fe19887d55605
SHA512

83388ca32dddc058d5127062b642d0af010d902f756770556d82a102e9d508d59c57bf95bdbb574083b3028b7afb5b9497b84b71f803ea689fd146f2e0fb1ad8
SSDEEP

6144:uzY26Mkfp3ggXNTJ5fdchQvNMKn1o/GiSEKI+:MuZPXNbuhUu+o/GuK1

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
0b210e51737d0dd3c70e20e2e05853bf_JaffaCakes118
unpack001/out.upx

Files

0b210e51737d0dd3c70e20e2e05853bf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 189KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ