3dd29341fe522116773cc61cf4b9d150_JaffaCakes118 | Triage

Sharing

General

Target

3dd29341fe522116773cc61cf4b9d150_JaffaCakes118
Size

198KB
MD5

3dd29341fe522116773cc61cf4b9d150
SHA1

954defd1188cf5f6d50b0024cdb67930d3cfe227
SHA256

c2251fd54e100cb3246a55d9ba26ad49d71c8c284ef33d0f9a505850af6cf2fa
SHA512

7dcaef6d296a63ef57e10f2536bca2afa15b1400ab2c16ad842448b442121965e65755223340d79a91140d6bfc930a2ce33938f7228a0cd2f8afc5a41b85f4ba
SSDEEP

6144:xUfATWGbecAXUfnO3ncVj3WmQkigBkwpB9Q2:xUYCGHAv3ctiSzb

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
3dd29341fe522116773cc61cf4b9d150_JaffaCakes118
unpack001/out.upx

Files

3dd29341fe522116773cc61cf4b9d150_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 189KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ