574ea0037b19e2951ab0fb0f9937bbc2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

574ea0037b19e2951ab0fb0f9937bbc2_JaffaCakes118
Size

10KB
MD5

574ea0037b19e2951ab0fb0f9937bbc2
SHA1

ac69ff706b6bec810013dd0775d636668746c651
SHA256

9c79037bd2e002c2fa2158d777efd1d16cbce1b87fd250de06717fb28436b37a
SHA512

11b4b2569f152a6b893e6586d0ae60441aea71dc93c5d9416e53038dcac8e43935478bdf15c81222f883a960969ed2b1e007ca670a54cebefd27286289302fe7
SSDEEP

192:uXnndSBm3sxrBFU2fSpfv2vvqJpPvJbCdG0JTd9tQ06DxWQqzubkx8rg+acsA0c+:u3dGmKXarJH2hJRfZ6DR9bkUCTJcuCA

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/nfs8u2tr3_edit_05_03_25/Ex_NFS_Underground_2.exe	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/nfs8u2tr3_edit_05_03_25/Ex_NFS_Underground_2.exe
unpack002/out.upx

Files

574ea0037b19e2951ab0fb0f9937bbc2_JaffaCakes118
.rar
nfs8u2tr3_edit_05_03_25/Ex_NFS_Underground_2.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nfs8u2tr3_edit_05_03_25/extalia.nfo
nfs8u2tr3_edit_05_03_25/readme.txt
欢迎访问YXDOWN游戏下载@www.yxdown.com.url
说明.txt