299288488012557ba637f13b593ef2ba_JaffaCakes118 | Triage

Sharing

General

Target

299288488012557ba637f13b593ef2ba_JaffaCakes118
Size

198KB
MD5

299288488012557ba637f13b593ef2ba
SHA1

95657efa41bf2c06b777e66042a15d31bec1f118
SHA256

27f4a88522c5b0ffa87e78d1e5c3eb42e2268da252cf6e9a0cca4f3547da18b2
SHA512

f76bba16b93defbc3a8fe4565bc7f5a5d1e0f044b799cb4f0719a969fcd7fbf24daf1c4691d0edbfb47982f3ee350b84bdf1eceda318e2cedf6a4ba48981671c
SSDEEP

3072:J3LqOykW2OTVlteBnJPUQom4gvxXbqDYFNiLmh38bEoml3nAGbQ:xLHW2OTVQagNb3Nqg9AGbQ

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
299288488012557ba637f13b593ef2ba_JaffaCakes118
unpack001/out.upx

Files

299288488012557ba637f13b593ef2ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 189KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ