2c745810c76f0bcca19392c121bb1a55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c745810c76f0bcca19392c121bb1a55_JaffaCakes118
Size

79KB
MD5

2c745810c76f0bcca19392c121bb1a55
SHA1

8906d0be278ce6b506f678d0522de623325ab656
SHA256

b4d6286a61a37372463c97f357857d1778d6d6161371970077db622360aab94b
SHA512

651635569d5b11de00c2c3c04b9841fc4c30ca67afcd47cc50f9764bdc82381390955661fda4ecbbcb102effc7887d42ecf13e5a8180b2881b2f6ad6bd52e73f
SSDEEP

1536:9CV7lCabq1jgwv6EGwIaL9AIsW/Adr4j3ofV4LsHvRuFDtWxYQn:YV7nbqqw0wIm9AIsW/ur4jYGgPROPQ

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
2c745810c76f0bcca19392c121bb1a55_JaffaCakes118
unpack001/out.upx

Files

2c745810c76f0bcca19392c121bb1a55_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ