JaffaCakes118_2da74cb135cb2324bb1ffa2a6032306e

General

Target
JaffaCakes118_2da74cb135cb2324bb1ffa2a6032306e
Size 303KB
Sample250920-v6mkpsdn81
SHA256 3273840f7c787605a57e054dc76e740e75e58061f309a18b481c0e41d0738f73
MD5 2da74cb135cb2324bb1ffa2a6032306e
SHA1 c67afe84724d414c4c6a40801cf3d11e3f8f96bc
SHA512 91c8f1570c418d38f0b5de2f8f72101dec5bce3da10e5c7336a4925966d2f052dbff071c3d35aa300ac8dcfec8b38956edee23b7c2cf7e63a3b1a37d2c9f516f
SSDEEP 6144:GbAfdpMfJNqkEsbMwx9jcdCEa6pR16To2TqUs9DerdikU0i1:GKWJNdt39Iw41h4Ts9DCdiR0i1
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack002/DOCUMENT FILE.exe	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack002/DOCUMENT FILE.exe
unpack003/out.upx

File Explorer

JaffaCakes118_2da74cb135cb2324bb1ffa2a6032306e

.ace 303KB
out.ace

.ace 303KB
DOCUMENT FILE.exe

.exe 360KB
out.upx

.exe 1.3MB

JaffaCakes118_2da74cb135cb2324bb1ffa2a6032306e

SHA256 3273840f7c787605a57e054dc76e740e75e58061f309a18b481c0e41d0738f73
MD5 2da74cb135cb2324bb1ffa2a6032306e
SHA1 c67afe84724d414c4c6a40801cf3d11e3f8f96bc
SHA512 91c8f1570c418d38f0b5de2f8f72101dec5bce3da10e5c7336a4925966d2f052dbff071c3d35aa300ac8dcfec8b38956edee23b7c2cf7e63a3b1a37d2c9f516f
SSDEEP 6144:GbAfdpMfJNqkEsbMwx9jcdCEa6pR16To2TqUs9DerdikU0i1:GKWJNdt39Iw41h4Ts9DCdiR0i1
MD5 SHA1 SHA512 SSDEEP

DOCUMENT FILE.exe

SHA256 847fa8413751c698b7cb1f258a4365d8e50915e4811fa916308f6b0e18cbc17d
MD5 fbe426a8d46b433667c3a30f38c703ab
SHA1 bed53dc755559ecc8ed6a84f7efbe877937324de
SHA512 8c22771d773da05bb36d0f4285c25b61157ad42c044d6029f98103b755b5567b2964d225fd18d9d0295bb25a002ba8c9dec9a9567862822ced0ea108f26c8956
SSDEEP 6144:bMiKtIEkQ4bxtveZSzTK7gHFQSB7h4LpIyFwHXyJu:+cQ4bxtveZ0KkOSI1IyFai
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

71118720

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 fa922ec1d19d863d294ac01fcc392ce5b159263752d418553bf5e7adfa3878f8
MD5 59525b5b41177397ac3a5b4cdc24adcc
SHA1 7da6719b1b758a27a3494a492b67b9ed2abd6356
SHA512 132dd3d111148fa3d07b18cd782bdb51056c2ed85e3d5660ed7608ca219316cdf50e3450ef177bc16b8f1ef182d7b2a490bb37dadba91efbf5c149248c98f747
SSDEEP 6144:st5L60wFakDKj1I1CLnWauSYftx0BoZ8K6VJuye+sxdETcZPbcLjdU:A+0wFaPIMLWEYfAomZe1lb0i
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

21536

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

JaffaCakes118_2da74cb135cb2324bb1ffa2a6032306e

out.ace

DOCUMENT FILE.exe

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_2da74cb135cb2324bb1ffa2a6032306e

out.ace

DOCUMENT FILE.exe

generic

out.upx

generic