Overview

overview

8

Static

static

8

upx201w/upx.vbs

windows7-x64

1

upx201w/upx.vbs

windows10-2004-x64

1

upx201w/upx.vbs

windows7-x64

1

upx201w/upx.vbs

windows10-2004-x64

1

upx201w/upx.exe

windows7-x64

5

upx201w/upx.exe

windows10-2004-x64

5

upx201w/upx.html

windows7-x64

3

upx201w/upx.html

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    425abfce123c57ed648553db3683cd8e_JaffaCakes118

  • Size

    247KB

  • MD5

    425abfce123c57ed648553db3683cd8e

  • SHA1

    c9792646e07c9ec09dfb11b12d6a405cae1db94d

  • SHA256

    68e0827123477cb8a1b7b408e76e3115411a9bc5cab8d32f326d83d0b7552dc3

  • SHA512

    b1179e844761c125661d210bc5b5bccc4a30dc85b89b2552cdefc25eee0acddea8a0e5cb4b244fe8568a32bf9ea2f44d2b706f8f3408976a256e91d7f0530d5d

  • SSDEEP

    6144:DGlIoR57RhxCQpLhD/k8jDUErqBkX3gSaBBDdGn6+F+koxakakb:D4lRhxHL/ksAjBkX3gSaBBMkkoxa8

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 425abfce123c57ed648553db3683cd8e_JaffaCakes118
    .zip
  • upx201w/BUGS
  • upx201w/COPYING
  • upx201w/LICENSE
  • upx201w/NEWS
  • upx201w/README
  • upx201w/README.1ST
  • upx201w/THANKS
  • upx201w/TODO
  • upx201w/upx.1
    .vbs
  • upx201w/upx.doc
    .vbs
  • upx201w/upx.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • upx201w/upx.html
    .html .vbs polyglot