2803603df07b425cbd94fde062544680_JaffaCakes118 | Triage

Sharing

General

Target

2803603df07b425cbd94fde062544680_JaffaCakes118
Size

1.2MB
MD5

2803603df07b425cbd94fde062544680
SHA1

dec06413c68d62a1f745e33abc7624ab4a139c6b
SHA256

32d974a92cf1f699299ac486dbf516da04082c196cda5e8d08633f80bff96822
SHA512

941156b1c96059e9c73ebe925c2f9f82e940e82cd992f46571e27f3dd475b2010ea254f6814ccb67b5a8458d42c6a8a89955385ac74ddbae762bbe69b74e2f09
SSDEEP

24576:t7endVbe7HDEUpCDzSK2v7LBUIGNKT+EdJuHDBQAfeOb1CYkI:t7xHxpCDzSK2fHGy+ELkPfeObI

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2803603df07b425cbd94fde062544680_JaffaCakes118

Files

2803603df07b425cbd94fde062544680_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 133KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�?
Size: 97KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc/0/version.txt
.rsrc/1033/GROUP_ICON/103
.rsrc/1033/ICON/1.ico
.rsrc/1033/ICON/10.ico
.rsrc/1033/ICON/11.ico
.rsrc/1033/ICON/2
.png
.rsrc/1033/ICON/3.ico
.rsrc/1033/ICON/4.ico
.rsrc/1033/ICON/5.ico
.rsrc/1033/ICON/6.ico
.rsrc/1033/ICON/7.ico
.rsrc/1033/ICON/8.ico
.rsrc/1033/ICON/9.ico
.rsrc/1033/MANIFEST/1
.xml
UPX1
[0]
?