2f30fc9d0dcc444bc96e117a53273320_JaffaCakes118

General

Target

2f30fc9d0dcc444bc96e117a53273320_JaffaCakes118
Size

133KB
MD5

2f30fc9d0dcc444bc96e117a53273320
SHA1

6f320cd390898d39963ed08efa39f5e027edcceb
SHA256

1ef8acefa79b9c57c413b4fbb4dd2bcae33448d8e8252b81e559d874f9f15b10
SHA512

fae3e8fcbbc7e13d8f70fbf957360ed521dc9621386661c92f757504d17c4f0034b1125f285d2c844f9730f2c8b9d31a42048bbacb32f70da0f03c6b13fb31b2
SSDEEP

768:5hFntkJ+DoRSPUm/suoVbkB1A0wYnv8daIjtW7CXa0DAnqL:5hFntkOoAP//7UbkTwYnv8oIUtn

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f30fc9d0dcc444bc96e117a53273320_JaffaCakes118

Files

2f30fc9d0dcc444bc96e117a53273320_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac47099c06174d0aa75d23d81935971d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
CreateThread
GetStdHandle
lstrcatA
lstrcpyA
SetConsoleTextAttribute
Sleep
FreeEnvironmentStringsA
FreeEnvironmentStringsW
HeapFree
CreateFileA
CloseHandle
ExitProcess
ReadFile
FlushFileBuffers
HeapReAlloc
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
LoadLibraryA
GetProcAddress
LCMapStringW
LCMapStringA
SetFilePointer
GetStringTypeW
GetStringTypeA
GetLocalTime
GetTimeZoneInformation
GetSystemTime
GetLastError
MultiByteToWideChar
GetCommandLineA
GetVersion
VirtualAlloc
GetCPInfo
SetStdHandle
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
HeapAlloc
SetHandleCount
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetStartupInfoA
GetACP
GetOEMCP
GetFileType
RtlUnwind
HeapDestroy
HeapCreate
VirtualFree
WriteFile

mpr

WNetAddConnection2A
WNetCancelConnection2A

netapi32

NetApiBufferFree
NetUserEnum

user32

wsprintfA

ws2_32

Sections

UPX0
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ac47099c06174d0aa75d23d81935971d

Headers

File Characteristics

Imports

kernel32

mpr

netapi32

user32

ws2_32

Sections

UPX0 Size: 128KB - Virtual size: 128KB

.rsrc Size: 3KB - Virtual size: 4KB

.avp Size: 1KB - Virtual size: 4KB

UPX0
Size: 128KB - Virtual size: 128KB

.rsrc
Size: 3KB - Virtual size: 4KB

.avp
Size: 1KB - Virtual size: 4KB