jaffacakes118__2d624febf5d64c2d3e733c0799ee8c55

General

Target
jaffacakes118__2d624febf5d64c2d3e733c0799ee8c55
Size 25KB
Sample260919-2d36batz2n
SHA256 ca963000b09949ed53561bb2adce3cfdc0723220e847c6f7a713e6675a7124dc
MD5 2d624febf5d64c2d3e733c0799ee8c55
SHA1 901ea6357a25444eca60e4c3e578262a366fd65f
SHA512 ce0d0a87ba984a55dbd2e92698f1c39fd0d3abf069fa2e7fa7a5e467c7ff48a1d5b46faa2ba9be050aa98b621a562d211797ab3a96bcfe5169a05758e191596b
SSDEEP 384:a4wbqqb66e2bfk6r3WlyvO8WWVsk8txn9+iz276IIh+9WPBKq+JSUin9pK4OxgFR:dwbO6TDZr3Z3WKsShISWJKquSU+K1mFR
TLSH
T1D7B2CF81341067D4DD23A4B51692246AB2302E37263D4BBAA5C43FDFECF90671E9DE14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__2d624febf5d64c2d3e733c0799ee8c55
unpack001/out.upx

File Explorer

jaffacakes118__2d624febf5d64c2d3e733c0799ee8c55

.exe 25KB
out.upx

.exe .hta .vbs 48KB

jaffacakes118__2d624febf5d64c2d3e733c0799ee8c55

SHA256 ca963000b09949ed53561bb2adce3cfdc0723220e847c6f7a713e6675a7124dc
MD5 2d624febf5d64c2d3e733c0799ee8c55
SHA1 901ea6357a25444eca60e4c3e578262a366fd65f
SHA512 ce0d0a87ba984a55dbd2e92698f1c39fd0d3abf069fa2e7fa7a5e467c7ff48a1d5b46faa2ba9be050aa98b621a562d211797ab3a96bcfe5169a05758e191596b
SSDEEP 384:a4wbqqb66e2bfk6r3WlyvO8WWVsk8txn9+iz276IIh+9WPBKq+JSUin9pK4OxgFR:dwbO6TDZr3Z3WKsShISWJKquSU+K1mFR
TLSH
T1D7B2CF81341067D4DD23A4B51692246AB2302E37263D4BBAA5C43FDFECF90671E9DE14
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

72144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 10428701d4554578e8cb52341dc92d0e03fc8c31d918fe501126f61ebfda901d
MD5 39613d456c84a28e18bf7547b474f1eb
SHA1 7da98bfc1a9352ee23df8c2a72955bbec927e9b6
SHA512 9dfb0df2ed754f2d6154e61d73b8eb38fedd239c2218e336c72bc1674bd7d759319e2fde3a00be11a2133c2067ee858d1023427c4f4be3268bd331e5fdfe2d8c
SSDEEP 768:2y8paKO7phRl6mbbw5QvuSBOW9h4c8MhW4QPQJQbi:9JKO7phRlJbbw5guSBOu+MWt0C
TLSH
T12D232958A1243BD0CE41D1781B836445E0B578B6C95BCB5A9BCAFEFDB8367087EB508C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86 polyglot

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

25599

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

jaffacakes118__2d624febf5d64c2d3e733c0799ee8c55

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__2d624febf5d64c2d3e733c0799ee8c55

generic

out.upx

generic