3d9b92780433c3590895a58a034fb023_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d9b92780433c3590895a58a034fb023_JaffaCakes118
Size

376KB
MD5

3d9b92780433c3590895a58a034fb023
SHA1

ffa12b8583e8aa8b8abb3ce8e02140f201ef9f35
SHA256

ed9ca1044ae2150d117d0e47e8558adcc83a0b2c6084027e2be404d8068ae5f1
SHA512

213f55fe115f774f1f9a4eb1b4e8dabaadb7a0fe6bbe677f659ae0bb52ce469b71e82ba0d0e0f01ae20e3af5a25fa3e4505f867a876d457802384f1ed94b8768
SSDEEP

6144:cYc4uWZ8cEs4KLbKEOUEXbE4xq4sEUlHZKX+JCdzyps0oYxCprnVbSy0JKIGnFf:1c4ue8czHHKvUEX432UF8X+JEGWYxCTX

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
3d9b92780433c3590895a58a034fb023_JaffaCakes118
unpack001/out.upx

Files

3d9b92780433c3590895a58a034fb023_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 548KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 374KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 682KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ