2c926e15ab45183004d7e77a54dc9525_JaffaCakes118

General

Target
2c926e15ab45183004d7e77a54dc9525_JaffaCakes118
Size 168KB
Sample241009-hdf61atarg
SHA256 f09cf7cb375f58f221f25f1f537d512466d38541190e0b52e86bddaf8f3e0745
MD5 2c926e15ab45183004d7e77a54dc9525
SHA1 9aa66e4479b57a5d00ab78db378720defb84281d
SHA512 b6f13f52d22b69fbca254b39a624b0e9ebb227a35f49c90451622862d4e916e3d81342a45461763b8b79a90d1ed83ae95cbc3aba9835748416aa688858ba0a04
SSDEEP 3072:CQFvHWYPM6jKn/+QC8iL/aLTll9ZP8Lcg+LUoFjnwt5jeZUHmHb:CyPM6jU/+TL/aLTl7ZP+cgFoFjn+QqHw
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
2c926e15ab45183004d7e77a54dc9525_JaffaCakes118
unpack001/out.upx

File Explorer

2c926e15ab45183004d7e77a54dc9525_JaffaCakes118

.exe 168KB
out.upx

.exe 176KB

2c926e15ab45183004d7e77a54dc9525_JaffaCakes118

SHA256 f09cf7cb375f58f221f25f1f537d512466d38541190e0b52e86bddaf8f3e0745
MD5 2c926e15ab45183004d7e77a54dc9525
SHA1 9aa66e4479b57a5d00ab78db378720defb84281d
SHA512 b6f13f52d22b69fbca254b39a624b0e9ebb227a35f49c90451622862d4e916e3d81342a45461763b8b79a90d1ed83ae95cbc3aba9835748416aa688858ba0a04
SSDEEP 3072:CQFvHWYPM6jKn/+QC8iL/aLTll9ZP8Lcg+LUoFjnwt5jeZUHmHb:CyPM6jU/+TL/aLTl7ZP+cgFoFjn+QqHw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

193744

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 3b775359eafdad749134dd72afb97fa99f65e9d8588f53b687a5d48f8313f53c
MD5 5581125877b3ffbca5164bb20be30fc4
SHA1 b19ea1c606916b0711709275fbb1006615a46b4a
SHA512 5bd483e3ab239dac159609efa04af1caa0af2caa05e52c1caaa9f09dca97533c0cfaa53c6043fd8a7734295564b1e6ddba325980c421d6871036f91d75775a38
SSDEEP 3072:E7Qt53L2qq0Z8k93xF26rBSPoV+gRh8BqelFW6++0vvOTYsSNwR9q5:5LHq0Z8k92iBSPoV+gRh8celb++0vvO1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4364

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

2c926e15ab45183004d7e77a54dc9525_JaffaCakes118

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

2c926e15ab45183004d7e77a54dc9525_JaffaCakes118

generic

out.upx

generic