1414229f0e1fe80e7a413c70f56a1ff9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1414229f0e1fe80e7a413c70f56a1ff9_JaffaCakes118
Size

107KB
MD5

1414229f0e1fe80e7a413c70f56a1ff9
SHA1

016f36c810859ac34e4d42451c43c348918e0a67
SHA256

7747d6075f9e3a4a6c24c20dd77582b456635ce65f25068edecb59d57bd999cf
SHA512

4859d5344190bcff3cf3231e71e0417cd34cd8d4d894b54793ebf00fe768dd90f6e0e5a547c56377191473465474b94e8fc703b351a867f67b48a30819b2649e
SSDEEP

1536:z0o5R2leEWO0RLAnLpy6zJgVJ2LIExjNTzd9KSOX+BCtjsADC4mcgaS6yL:Ao5XEELALpNYJ/EDDvu+B4s42Dafo

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
1414229f0e1fe80e7a413c70f56a1ff9_JaffaCakes118
unpack001/out.upx

Files

1414229f0e1fe80e7a413c70f56a1ff9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ